CVE-2021-27312

9.4 criticalEPSS 1.0%

Critical (9.4) in gleezcms gleez cms. EPSS 1.0% chance of exploitation in the next 30 days.

Server Side Request Forgery (SSRF) vulnerability in Gleez Cms 1.2.0, allows remote attackers to execute arbitrary code and obtain sensitive information via modules/gleez/classes/request.php.

Severity

CVSS 3.1

9.4 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L

EPSS: 1.0% chance of exploitation in the next 30 days; higher than 63% of CVEs (scores of 2026-10-31)
CWE: CWE-918
Published: 2024-04-03
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

gleezcms:gleez_cms

References

https://gist.github.com/LioTree/8d10d123d31f50db05a25586e62a87ba
https://github.com/gleez/cms/issues/805
https://gist.github.com/LioTree/8d10d123d31f50db05a25586e62a87ba
https://github.com/gleez/cms/issues/805

Check your stack JSON