CVE-2017-10973: Finecms Project Finecms

Medium severity, CVSS 6.5. EPSS: 0.8% chance of exploitation in the next 30 days.

In FineCMS before 2017-07-06, application/lib/ajax/get_image_data.php has SSRF, related to requests for non-image files with a modified HTTP Host header.

Affected products

• Finecms Project Finecms: up to and including 2017-05-12

Published 2017-07-06. Last modified 2026-06-17.