CVE-2023-39110

2023-08-0100:00:00

mitre

www.cve.org

rconfig v3.9.4

ssrf

server-side request forgery

authenticated attackers

crafted urls

injection

0.047 Low

EPSS

Percentile

92.7%

JSON

rconfig v3.9.4 was discovered to contain a Server-Side Request Forgery (SSRF) via the path parameter at /ajaxGetFileByPath.php. This vulnerability allows authenticated attackers to make arbitrary requests via injection of crafted URLs.

References

github.com/zer0yu/CVE_Request/blob/master/rConfig/rConfig_%20ajaxGetFileByPath.md

0.047 Low

EPSS

Percentile

92.7%

JSON

Related for CVELIST:CVE-2023-39110