chshcms mccms Server-Side Request Forgery Vulnerability

A critical server-side request forgery (SSRF) vulnerability has been identified in chshcms mccms version 2.7. The issue arises in the 'index' function of the file 'sys/apps/controllers/api/Gf.php', where the 'pic' argument can be manipulated to initiate unauthorized network requests. This vulnerability can be exploited remotely, potentially allowing attackers to read arbitrary files or send network requests to internal services.

Impact

Exploitation of this vulnerability allows for server-side request forgery, where an attacker can manipulate the server to make requests on their behalf. This could lead to unauthorized access to internal resources or services.

Reproduction

To reproduce this vulnerability, send a request to the 'sys/apps/controllers/api/Gf.php' endpoint with a crafted 'pic' parameter that directs the server to an internal resource or service. This can be done by exploiting the SSRF vulnerability to access sensitive data or services that are not exposed to the public.