CVE-2020-25353

CVE-2020-25353 describes a server-side request forgery (SSRF) in rConfig 3.9.5 that allowed remote authenticated attackers to open a connection to a target machine via the deviceIpAddr and connPort parameters. The issue was remediated in version 3.9.6. Affected software is the rConfig configurati...