Rhymix Cms
Monthly
Server-side request forgery in Rhymix CMS up to version 2.1.33 enables authenticated administrators to direct the server to fetch arbitrary internal or external URLs via the Data Import Module. The vulnerable entry point is the `procImporterAdminCheckXmlFile` function, where the `filename` argument is passed to server-side request logic without adequate validation, per CWE-918. Publicly available exploit code exists on GitHub (MCzhao2006/Rhymix-SSRF-Report), and this vulnerability is not currently listed in CISA KEV; EPSS data was not provided in source intelligence.
Server-side request forgery in Rhymix CMS up to version 2.1.33 enables authenticated administrators to direct the server to fetch arbitrary internal or external URLs via the Data Import Module. The vulnerable entry point is the `procImporterAdminCheckXmlFile` function, where the `filename` argument is passed to server-side request logic without adequate validation, per CWE-918. Publicly available exploit code exists on GitHub (MCzhao2006/Rhymix-SSRF-Report), and this vulnerability is not currently listed in CISA KEV; EPSS data was not provided in source intelligence.