CVE-2021-40604: Invisioncommunity Ips Community Suite

Critical severity, CVSS 9.1. EPSS: 1.2% chance of exploitation in the next 30 days.

A Server-Side Request Forgery (SSRF) vulnerability in IPS Community Suite before 4.6.2 allows remote authenticated users to request arbitrary URLs or trigger deserialization via phar protocol when generating class names dynamically. In some cases an exploitation is possible by an unauthenticated user.

Affected products

• Invisioncommunity Ips Community Suite: before 4.6.2 (fixed in 4.6.2)

Published 2022-06-13. Last modified 2026-06-17.