CVE-2017-12905

Critical

Published: 25/09/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Server Side Request Forgery vulnerability in Vebto Pixie Image Editor versions 1.4 and 1.7 allows remote attackers to disclose information or execute arbitrary code via the url parameter to Launderer.php.

Risk Assessment

Attackers can exploit this vulnerability to gain access to sensitive data or execute arbitrary code remotely, potentially leading to serious security breaches within the organization.

Recommendation

It is recommended to update the Vebto Pixie Image Editor to the latest version to mitigate this vulnerability and to monitor server logs for potential attack attempts.

Original NVD description (English source)

Server Side Request Forgery vulnerability in Vebto Pixie Image Editor 1.4 and 1.7 allows remote attackers to disclose information or execute arbitrary code via the url parameter to Launderer.php.