Lucene search
K

9 matches found

RedhatCVE
RedhatCVE
added 2025/05/23 5:5 a.m.4 views

CVE-2023-49471

Blind Server-Side Request Forgery SSRF vulnerability in karlomikus Bar Assistant before version 3.2.0 does not validate a parameter before making a request through Image::make, which could allow authenticated remote attackers to execute arbitrary code...

8.8CVSS7.7AI score0.0113EPSS
Exploits1
OSV
OSV
added 2024/01/10 9:15 a.m.12 views

CVE-2023-49471

Blind Server-Side Request Forgery SSRF vulnerability in karlomikus Bar Assistant before version 3.2.0 does not validate a parameter before making a request through Image::make, which could allow authenticated remote attackers to execute arbitrary code...

8.8CVSS7.6AI score0.0113EPSS
Exploits1References1
NVD
NVD
added 2024/01/10 9:15 a.m.13 views

CVE-2023-49471

Blind Server-Side Request Forgery SSRF vulnerability in karlomikus Bar Assistant before version 3.2.0 does not validate a parameter before making a request through Image::make, which could allow authenticated remote attackers to execute arbitrary code...

8.8CVSS8.9AI score0.0113EPSS
Exploits1References1
Prion
Prion
added 2024/01/10 9:15 a.m.13 views

Server side request forgery (ssrf)

Blind Server-Side Request Forgery SSRF vulnerability in karlomikus Bar Assistant before version 3.2.0 does not validate a parameter before making a request through Image::make, which could allow authenticated remote attackers to execute arbitrary code...

6.5CVSS7.9AI score0.0113EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2024/01/10 12:0 a.m.17 views

CVE-2023-49471

Blind Server-Side Request Forgery SSRF vulnerability in karlomikus Bar Assistant before version 3.2.0 does not validate a parameter before making a request through Image::make, which could allow authenticated remote attackers to execute arbitrary code...

9.1AI score0.0113EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2024/01/10 12:0 a.m.5 views

CVE-2023-49471

Blind Server-Side Request Forgery SSRF vulnerability in karlomikus Bar Assistant before version 3.2.0 does not validate a parameter before making a request through Image::make, which could allow authenticated remote attackers to execute arbitrary code...

9AI score0.0113EPSS
Exploits1References1
CNNVD
CNNVD
added 2024/01/10 12:0 a.m.5 views

Bar Assistant Security Breach

Bar Assistant is a self-hosted application for managing home bars. A security vulnerability exists in Bar Assistant that stems from not validating parameters before making a request via Image::make, which could lead to arbitrary code execution...

8.8CVSS7.6AI score0.0113EPSS
Exploits1References2
CVE
CVE
added 2024/01/10 12:0 a.m.47 views

CVE-2023-49471

CVE-2023-49471 is a Blind SSRF in the karlomikus Bar Assistant prior to version 3.2.0. The issue arises because a parameter is not validated before making a request via Image::make(), potentially allowing authenticated remote attackers to execute arbitrary code. Affected software/version: karlomi...

8.8CVSS8.9AI score0.0113EPSS
Exploits1References1Affected Software1
Positive Technologies
Positive Technologies
added 2024/01/10 12:0 a.m.5 views

PT-2024-13739 · Unknown · Karlomikus Bar Assistant

Name of the Vulnerable Software and Affected Versions: karlomikus Bar Assistant versions prior to 3.2.0 Description: The issue is related to a Blind Server-Side Request Forgery SSRF vulnerability. It does not validate a parameter before making a request through Image::make, which could allow...

8.8CVSS8.9AI score0.0113EPSS
Exploits1References6
Rows per page
Query Builder