CVE-2019-11574

PoC —

CVSS 3.1

9.8 critical

EPSS

1%p72

Published

Mar 20, 2020 (Mar 20, 2020)

Modified

Jun 17, 2026

Description

An issue was discovered in Simple Machines Forum (SMF) before release 2.0.17. There is SSRF related to Subs-Package.php and Subs.php because user-supplied data is used directly in curl calls.

Vendors: simplemachines
Products: simple machine forum
Weakness: CWE-918
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.5%)

In the news0 stories

No ingested article mentions this CVE yet.