CyberRota Analysis
AI-GeneratedInstantCMS versions prior to 2.18.2 are vulnerable to a Server-Side Request Forgery (SSRF) in the file upload functionality, which can be exploited by authenticated users to bypass private IP address restrictions and access internal network services. This vulnerability poses a low severity risk but should be prioritized by organizations using affected versions of InstantCMS, particularly those with sensitive internal services that could be exposed. Upgrading to version 2.18.2 or later is essential to mitigate this risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
InstantCMS is a free and open source content management system. Versions prior to 2.18.2 have a Server-Side Request Forgery (SSRF) vulnerability in the file upload functionality (`system/core/uploader.php` at lines 509-532). When the "upload from URL" feature follows an HTTP redirect, the redirected target URL bypasses the private IP address blacklist check. This allows authenticated users to scan and access internal network services. Version 2.18.2 contains a fix.