Lucene search
+L

11 matches found

Kitploit
Kitploit
•added 2026/10/01 1:53 p.m.•10 views

CVE-2023-49471

CVE-2023-49471 脆弱性タイプ Blind SSRF 影響を受ける製品とバージョン Bar assistant / -----------------------------8290129562507108753887567115 Content-Disposition: form-data; name="images0copyright" -----------------------------8290129562507108753887567115 Content-Disposition: form-data; name="images0sort" 1...

8.8CVSS8.1AI score0.0113EPSS
SaveExploits1
RedhatCVE
RedhatCVE
•added 2025/05/23 5:05 a.m.•17 views

CVE-2023-49471

Blind Server-Side Request Forgery SSRF vulnerability in karlomikus Bar Assistant before version 3.2.0 does not validate a parameter before making a request through Image::make, which could allow authenticated remote attackers to execute arbitrary code...

8.8CVSS7.7AI score0.0113EPSS
SaveExploits1
NVD
NVD
•added 2024/01/10 9:15 a.m.•29 views

CVE-2023-49471

Blind Server-Side Request Forgery SSRF vulnerability in karlomikus Bar Assistant before version 3.2.0 does not validate a parameter before making a request through Image::make, which could allow authenticated remote attackers to execute arbitrary code...

8.8CVSS8.9AI score0.0113EPSS
SaveExploits1References1
Prion
Prion
•added 2024/01/10 9:15 a.m.•25 views

Server side request forgery (ssrf)

Blind Server-Side Request Forgery SSRF vulnerability in karlomikus Bar Assistant before version 3.2.0 does not validate a parameter before making a request through Image::make, which could allow authenticated remote attackers to execute arbitrary code...

6.5CVSS7.9AI score0.0113EPSS
SaveExploits1References1Affected Software1
CVE
CVE
•added 2024/01/10 12:00 a.m.•75 views

CVE-2023-49471

CVE-2023-49471 is a Blind SSRF in the karlomikus Bar Assistant prior to version 3.2.0. The issue arises because a parameter is not validated before making a request via Image::make(), potentially allowing authenticated remote attackers to execute arbitrary code. Affected software/version: karlomi...

8.8CVSS8.9AI score0.0113EPSS
SaveExploits1References1Affected Software1
OSV
OSV
•added 2024/01/10 12:00 a.m.•19 views

CVE-2023-49471

Blind Server-Side Request Forgery SSRF vulnerability in karlomikus Bar Assistant before version 3.2.0 does not validate a parameter before making a request through Image::make, which could allow authenticated remote attackers to execute arbitrary code...

8.8CVSS7.6AI score
SaveExploits0References3
Cvelist
Cvelist
•added 2024/01/10 12:00 a.m.•31 views

CVE-2023-49471

Blind Server-Side Request Forgery SSRF vulnerability in karlomikus Bar Assistant before version 3.2.0 does not validate a parameter before making a request through Image::make, which could allow authenticated remote attackers to execute arbitrary code...

9.1AI score0.0113EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/10 12:00 a.m.•4 views

CVE-2023-49471: Server-Side Request Forgery (SSRF)

Blind Server-Side Request Forgery SSRF vulnerability in karlomikus Bar Assistant before version 3.2.0 does not validate a parameter before making a request through Image::make, which could allow authenticated remote attackers to execute arbitrary code...

8.8CVSS8.4AI score0.0113EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2024/01/10 12:00 a.m.•10 views

CVE-2023-49471

Blind Server-Side Request Forgery SSRF vulnerability in karlomikus Bar Assistant before version 3.2.0 does not validate a parameter before making a request through Image::make, which could allow authenticated remote attackers to execute arbitrary code...

9AI score0.0113EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2024/01/10 12:00 a.m.•29 views

PT-2024-13739 · Unknown · Karlomikus Bar Assistant

Name of the Vulnerable Software and Affected Versions: karlomikus Bar Assistant versions prior to 3.2.0 Description: The issue is related to a Blind Server-Side Request Forgery SSRF vulnerability. It does not validate a parameter before making a request through Image::make, which could allow...

8.8CVSS8.9AI score0.0113EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2024/01/10 12:00 a.m.•15 views

Bar Assistant Security Breach

Bar Assistant is a self-hosted application for managing home bars. A security vulnerability exists in Bar Assistant that stems from not validating parameters before making a request via Image::make, which could lead to arbitrary code execution...

8.8CVSS7.6AI score0.0113EPSS
SaveExploits1References2
Rows per page
Query Builder