CVE-2023-3121

Dahua Smart Parking Management (versions up to 20230528) contains a server-side request forgery (SSRF) in the /ipms/imageConvert/image endpoint triggered by manipulating the fileUrl parameter. The vulnerability affects an unknown code path in that file and exploitation has been publicly disclosed...