CVE-2021-27312

Server Side Request Forgery (SSRF) vulnerability in Gleez Cms 1.2.0, allows remote attackers to execute arbitrary code and obtain sensitive information via modules/gleez/classes/request.php.

Published: Apr 3, 2024
Updated: May 4, 2025
CVE: CVE-2021-27312
GHSA: GHSA-7mxg-r76p-363g
Severity: Critical
Exploit:

CVSS v3:

Severity: Unknown
Score:
AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

CWEs:

CWE-918

Affected Software
References

Software	From	Fixed in
gleez / cms	-	1.2.0.x
gleezcms / gleez_cms	1.2.0	1.2.0.x

https://gist.github.com/LioTree/8d10d123d31f50db05a25586e62a87ba
https://github.com/gleez/cms/issues/805

Vulnerability Database

CVE-2021-27312