CVE-2023-39854

2023-10-0900:00:00

mitre

www.cve.org

atx ucrypt

web interface

ssrf vulnerability

authenticated users

default credentials

6.5 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

18.1%

JSON

The web interface of ATX Ucrypt through 3.5 allows authenticated users (or attackers using default credentials for the admin, master, or user account) to include files via a URL in the /hydra/view/get_cc_url url parameter. There can be resultant SSRF.

References

wiki.notveg.ninja/blog/CVE-2023-39854/