CVE-2023-49471

2024-01-1000:00:00

mitre

www.cve.org

ssrf

karlomikus

bar assistant

vulnerability

remote code execution

image::make()

authenticated

AI Score

9.1

Confidence

High

EPSS

0.001

Percentile

41.3%

JSON

Blind Server-Side Request Forgery (SSRF) vulnerability in karlomikus Bar Assistant before version 3.2.0 does not validate a parameter before making a request through Image::make(), which could allow authenticated remote attackers to execute arbitrary code.

References

github.com/zunak/CVE-2023-49471