CVE-2007-4314 Server-side request forgery in n/a
Remote attackers can trigger server-side requests to read files and process images, enabling traffic amplification and denial of service.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2007-4314?
CVE-2007-4314 is a medium-severity server-side request forgery vulnerability in n/a, published on 13 Aug 2007. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
pixlie.php in Pixlie 1.7 allows remote attackers to trigger the reading and JPEG image processing of files in a remote directory tree via a URL in the root parameter. NOTE: this can be leveraged for traffic amplification or other denial of service.
Which versions are affected by CVE-2007-4314?
It affects 1 product.
Products include Pixlie Pixlie.
How do I fix CVE-2007-4314?
No fix has been published for CVE-2007-4314 yet. Limit exposure of the affected software until one is available.
Upgrade, and send outbound requests through an allow-list that blocks internal addresses. More about Server-side request forgery.
Is CVE-2007-4314 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2007-4314 exists.
Public exploit code: 1 Exploit-DB entry.
Sources
Also known as GHSA-6p3c-cf6r-gj3c.