CVE-2017-20157
low-risk
Published 2022-12-31
A vulnerability was found in Ariadne Component Library up to 2.x. It has been classified as critical. Affected is an unknown function of the file src/url/Url.php. The manipulation leads to server-side request forgery. Upgrading to version 3.0 is able to address this issue. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-217140.
Do I need to act?
-
0.35% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
5
CVSS 5.5/10
Medium
ADJACENT_NETWORK
/ LOW complexity
Affected Products (1)
Ariadne Component Library
Affected Vendors
References (8)
Release Notes
https://github.com/Ariadne-CMS/arc-web/releases/tag/3.0
Third Party Advisory
https://vuldb.com/?ctiid.217140
Third Party Advisory
https://vuldb.com/?id.217140
Release Notes
https://github.com/Ariadne-CMS/arc-web/releases/tag/3.0
Third Party Advisory
https://vuldb.com/?ctiid.217140
Third Party Advisory
https://vuldb.com/?id.217140
24
/ 100
low-risk
Severity
18/34 · Moderate
Exploitability
1/34 · Minimal
Exposure
5/34 · Minimal