Approved changes feed: RSS · Atom

cpe:2.3:a:baijiacms_project:baijiacms:4.1.4:*:*:*:*:*:*:*

part: a version: 4.1.4 update: *

VendorBaijiacms Project (b3982c1d-142f-5542-b487-3450ca42f0bd)
ProductBaijiacms (bd7c0d22-b9c1-53f5-9fea-7c44852ed51e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/baijiacms/baijiacmsv2 purl2cpe 2026-06-01 10:12:31.107576

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-38931 vulnerable 2026-06-08 05:47:17.541434 Details available
A Server-Side Request Forgery (SSRF) in fetch_net_file_upload function of baijiacmsV4 v4.1.4 allows remote attackers to force the application to make arbitrary requests via injection of arbitrary URLs into the url parameter.
Published: 2022-09-20T19:58:59.000Z
Updated: 2025-05-28T15:54:36.340Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-33396 vulnerable 2026-06-08 05:32:11.437728 Details available
Cross Site Request Forgery (CSRF) vulnerability in baijiacms 4.1.4, allows attackers to change the password or other information of an arbitrary account via index.php.
Published: 2023-02-15T00:00:00.000Z
Updated: 2025-03-20T14:05:05.618Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.