CyberRota Analysis
AI-GeneratedCamaleon CMS versions 2.7.5 through 2.9.1 are vulnerable due to inadequate validation of redirect targets in the Upload from URL feature, enabling authenticated attackers to exploit this flaw. This could lead to server-side request forgery (SSRF) attacks, allowing access to internal network services. Organizations using affected versions should prioritize patching to mitigate potential risks to their internal infrastructure.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Camaleon CMS versions 2.7.5 through 2.9.1 fail to validate redirect targets when fetching remote files in the Upload from URL media feature. Authenticated attackers can supply URLs that pass initial validation but redirect to internal network addresses, allowing server-side request forgery to internal services.