{"id":"CVE-2021-27312","details":"Server Side Request Forgery (SSRF) vulnerability in Gleez Cms 1.2.0, allows remote attackers to execute arbitrary code and obtain sensitive information via modules/gleez/classes/request.php.","aliases":["GHSA-7mxg-r76p-363g"],"modified":"2026-07-09T00:13:17.191488Z","published":"2024-04-03T06:15:07.350Z","references":[{"type":"REPORT","url":"https://github.com/gleez/cms/issues/805"},{"type":"EVIDENCE","url":"https://gist.github.com/LioTree/8d10d123d31f50db05a25586e62a87ba"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/gleez/cms","events":[{"introduced":"637b864392ee707839459278ad5f6fb9311c65bf"},{"last_affected":"637b864392ee707839459278ad5f6fb9311c65bf"}],"database_specific":{"extracted_events":[{"introduced":"1.2.0"},{"last_affected":"1.2.0"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:gleezcms:gleez_cms:1.2.0:*:*:*:*:*:*:*"}}],"versions":["1.2.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-27312.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L"}]}