Server side request forgery (ssrf)

2024-01-1009:15:00

PRIOn knowledge base

www.prio-n.com

server side request forgery

karlomikus bar assistant

remote code execution

7.9 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

41.4%

JSON

Blind Server-Side Request Forgery (SSRF) vulnerability in karlomikus Bar Assistant before version 3.2.0 does not validate a parameter before making a request through Image::make(), which could allow authenticated remote attackers to execute arbitrary code.

CPENameOperatorVersion
bar_assistantlt3.2.0

CPE	Name	Operator	Version
	bar_assistant	lt	3.2.0

References

github.com/zunak/CVE-2023-49471