CVE-2023-27160

forem up to v2022.11.11 was discovered to contain a Server-Side Request Forgery (SSRF) via the...

7.2 High

CVE-2023-27160 is a high vulnerability (CVSS 7.2) in Forem, published March 31, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.16%, the 67th percentile. No source names a fixed version.

forem up to v2022.11.11 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /articles/{id}. This vulnerability allows attackers to access network resources and sensitive information via a crafted POST request.

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: Low
Privileges needed: High
User interaction: None

What an attacker can affect

Confidentiality: High
Integrity: High
Availability: High

Exploit likelihood

1.16%Up 1.1 points since Apr 1, 2023

What each source reports

NVD Score used 7.2

Record: CVE-2023-27160
CVSS 3.1: 7.2 HighCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-918
Updated: 2026-11-02

CVE List 7.2

Record: CVE-2023-27160
CVSS 3.1: 7.2 HighCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-918
Updated: 2026-11-02

EUVDEUVD-2023-30942 7.2

Record: EUVD-2023-30942
CVSS 3.1: 7.2 HighCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

GitHub AdvisoriesGHSA-v5g3-mw88-c3jm 7.2

forem up to v2022.11.11 was discovered to contain a Server-Side Request Forgery (SSRF) via the...

Record: GHSA-v5g3-mw88-c3jm
CVSS 3.1: 7.2 HighCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-918
Updated: 2026-11-02

Affected products

forem

History

History
When	Changed	Sources
2026-11-02	created	CVE List, EUVD, GitHub Advisories, NVD