Yifang CMS Server-Side Request Forgery Vulnerability

A Server-Side Request Forgery (SSRF) vulnerability has been identified in Yifang CMS version 2.0.2. The issue resides in the 'getRemoteContent' API endpoint, allowing attackers to manipulate server-side requests and potentially access internal resources or services.

Impact

Exploitation of this vulnerability allows for Server-Side Request Forgery, where an attacker can make the server send requests on its behalf. This could be used to access internal services, files, or metadata that are not normally exposed to the outside world.