CVE-2017-14323

9.8 criticalEPSS 4.3%

Critical (9.8) in onethink onethink. EPSS 4.3% chance of exploitation in the next 30 days.

SSRF (Server Side Request Forgery) in getRemoteImage.php in Ueditor in Onethink V1.0 and V1.1 allows remote attackers to obtain sensitive information, attack intranet hosts, or possibly trigger remote command execution via the upfile parameter.

Severity

CVSS 3.0

9.8 critical

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 4.3% chance of exploitation in the next 30 days; higher than 91% of CVEs (scores of 2026-10-31)
CWE: CWE-918
Published: 2018-04-10
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

onethink:onethink

References

http://seclists.org/fulldisclosure/2018/Apr/16
http://seclists.org/fulldisclosure/2018/Apr/16

Check your stack JSON