CVE-2020-24444CWE-918

Blind SSRF in Forms add-on for AEM

Medium · published December 10, 2020

CVSS v3.1
5.8
EPSS
2%
Percentile
81.6
In the wild
Unconfirmed
What it is

AEM Forms SP6 add-on for AEM 6.5.6.0 and Forms add-on package for AEM 6.4 Service Pack 8 Cumulative Fix Pack 2 (6.4.8.2) have a blind Server-Side Request Forgery (SSRF) vulnerability. This vulnerability could be exploited by an unauthenticated attacker to gather information about internal systems that reside on the same network.

The record
Technical detail
CVSS v3.1
5.8 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.02102 · 81.6th percentile
Weakness
CWE-918 · Server-Side Request Forgery (SSRF)
Published
2020-12-10T05:32Z
EPSS history
Timeline
  • 10 DEC 05:32Z
    Blind SSRF in Forms add-on for AEM
    cvelistv5