Staging Environment: Content and features may be unstable or change without notice.
Advisory details: github_osv / GHSA-vx6p-q4gj-x6xx
Advisory ID github_osv/GHSA-vx6p-q4gj-x6xx
Aliases CVE-2021-25972
Summary Camaleon CMS vulnerable to Server-Side Request Forgery In Camaleon CMS, versions 2.1.2.0 through 2.6.0, are vulnerable to Server-Side Request Forgery (SSRF) in the media upload feature, which allows admin users to fetch media files from external URLs but fails to validate URLs referencing to localhost or other internal servers. This allows attackers to read files stored in the internal server.
Status Published
Exploitability 0.5
Weighted Severity 4.4
Risk 2.2
Affected and Fixed Packages Package Details
Introduced and Fixed Package Commit Patches Package Commit Patches Details
Weaknesses (1)
CWE-918 Server-Side Request Forgery (SSRF)
System Score Found at
cvssv3.1 4.9 https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-vx6p-q4gj-x6xx/GHSA-vx6p-q4gj-x6xx.json
generic_textual MODERATE
Reference id Reference type URL
https://github.com/owen2345/camaleon-cms
https://github.com/rubysec/ruby-advisory-db/blob/master/gems/camaleon_cms/CVE-2021-25972.yml
5a252d537411fdd0127714d66c1d76069dc7e190 Other https://github.com/owen2345/camaleon-cms/commit/5a252d537411fdd0127714d66c1d76069dc7e190
CVE-2021-25972 https://nvd.nist.gov/vuln/detail/CVE-2021-25972
CVE-2021-25972 Other https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25972
No exploits are available.

No EPSS data available for this advisory.

Patch URL
There are no known patches.
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N Found at https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-vx6p-q4gj-x6xx/GHSA-vx6p-q4gj-x6xx.json
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none

Vector: SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-30T15:49:41Z/

Decision: Track

Source URL: https://github.com/cisagov/vulnrichment/blob/develop/2021/25xxx/CVE-2021-25972.json

Source Advisory: vulnrichment/CVE-2021-25972

View SSVC decision tree 
[{'Exploitation': 'poc'},
 {'Automatable': 'no'},
 {'Technical Impact': 'partial'},
 {'Mission Prevalence': 'minimal'},
 {'Public Well-being Impact': 'material'},
 {'Mission & Well-being': 'medium'}]