{"id":"CVE-2018-14858","published":"2018-08-02T20:00:00Z","modified":"2024-08-05T09:38:13Z","title":"An SSRF vulnerability was discovered in idreamsoft iCMS before V7.0.11 because the remote function in…","vendor":null,"product":null,"tier":"tail","description":{"text":"An SSRF vulnerability was discovered in idreamsoft iCMS before V7.0.11 because the remote function in app/spider/spider_tools.class.php does not block private and reserved IP addresses such as 10.0.0.0/8. NOTE: this vulnerability exists because of an incomplete fix for CVE-2018-14514.","provenance":"source","from":"CVE.org"},"cvss":null,"epss":{"score":0.01472,"percentile":0.73691,"provenance":"source"},"cwes":[],"references":[{"url":"https://github.com/idreamsoft/iCMS/issues/33","tags":["x_refsource_MISC"]}],"priority":{"score":14.7,"factors":[{"name":"EPSS percentile","points":14.74}]},"euvd":{"id":"EUVD-2018-6740","exploited":false,"provenance":"source"},"lineage":{"familyId":"fam-cve-2018-14514-family-cve-2018-14514","parents":[{"from":"CVE-2018-14514","to":"CVE-2018-14858","relation":"incomplete-fix","confidence":"high","kind":"lineage","evidence":[{"kind":"text","provenance":"source","relation":"incomplete-fix","quote":"NOTE: this vulnerability exists because of an incomplete fix for CVE-2018-14514.","from":"CVE.org","in":"CVE-2018-14858"}]}],"children":[{"from":"CVE-2018-14858","to":"CVE-2018-15895","relation":"incomplete-fix","confidence":"high","kind":"lineage","evidence":[{"kind":"text","provenance":"source","relation":"incomplete-fix","quote":"NOTE: this vulnerability exists because of an incomplete fix for CVE-2018-14858.","from":"CVE.org","in":"CVE-2018-15895"}]}]}}