CVE-2026-43936

Published: Mag 26, 2026 Last Modified: Mag 26, 2026
ExploitDB:
Other exploit source:
Google Dorks:
MEDIUM 4,3
Source: [email protected]
Attack Vector: network
Attack Complexity: low
Privileges Required: low
User Interaction: none
Scope: unchanged
Confidentiality: low
Integrity: none
Availability: none

Description

AI Translation Available

e107 is a content management system (CMS). Prior to 2.3.4, you can access the local environment by specifying the URL of the local environment from 'Image/File URL:' of 'From a remote location' in 'Media Manager' on the administrator screen. This vulnerability is fixed in 2.3.4.

918

Server-Side Request Forgery (SSRF)

Incomplete
Abstraction: Base Structure: Simple
Common Consequences
Security Scopes Affected:
Confidentiality Integrity Access Control
Potential Impacts:
Read Application Data Execute Unauthorized Code Or Commands Bypass Protection Mechanism
Applicable Platforms
Technologies: Web Based, AI/ML, Web Server
View CWE Details
https://github.com/e107inc/e107/security/advisories/GHSA-92…
https://github.com/e107inc/e107/security/advisories/GHSA-92fr-7h4f-22pp
https://github.com/e107inc/e107/commit/40b2d111
https://github.com/e107inc/e107/commit/40b2d111
https://github.com/e107inc/e107/commit/5f98cc9f
https://github.com/e107inc/e107/commit/5f98cc9f
https://github.com/e107inc/e107/security/advisories/GHSA-92…
https://github.com/e107inc/e107/security/advisories/GHSA-92fr-7h4f-22pp