Posted by Ron E on Sep 03 Description

Flextype CMS v1.0.0-alpha.3 contains a stored server-side request forgery

(SSRF) vulnerability in its shortcode-processing functionality.

Attacker-controlled entry fields can be automatically processed by

Flextype's shortcode parser. The built-in fetch shortcode accepts an

attacker-controlled resource and passes the resulting value to the

server-side fetch() helper without sufficient destination restrictions.

An attacker...