A Server-Side Request Forgery (SSRF) in the getFileBinary function of nbnbk cms 3 allows attackers to force the application to make arbitrary requests via injection of arbitrary URLs into the URL parameter.
- https://github.com/Fanli2012/nbnbk/issues/5
- https://github.com/ARPSyndicate/cvemon