CVE-2017-12905

10.0 criticalEPSS 2.6%

Critical (10.0) in vebto pixie - image editor. EPSS 2.6% chance of exploitation in the next 30 days.

Server Side Request Forgery vulnerability in Vebto Pixie Image Editor 1.4 and 1.7 allows remote attackers to disclose information or execute arbitrary code via the url parameter to Launderer.php.

Severity

CVSS 3.1

10.0 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

EPSS: 2.6% chance of exploitation in the next 30 days; higher than 85% of CVEs (scores of 2026-10-31)
CWE: CWE-918
Published: 2017-09-25
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

vebto:pixie_-_image_editor

References

http://seclists.org/fulldisclosure/2017/Sep/47
http://seclists.org/fulldisclosure/2017/Sep/47

Check your stack JSON