Lucene search
+L

3 matches found

attackerkb
attackerkb
•added 2023/06/01 2:15 a.m.•18 views

CVE-2023-28824

Server-side request forgery vulnerability exists in CONPROSYS HMI System CHS versions prior to 3.5.3. A user who can access the affected product with an administrative privilege may bypass the database restriction set on the query setting page, and connect to a user unintended database...

4.9CVSS5.9AI score0.00641EPSS
SaveExploits0References4Affected Software1
Prion
Prion
•added 2023/06/01 2:15 a.m.•30 views

Server side request forgery (ssrf)

Server-side request forgery vulnerability exists in CONPROSYS HMI System CHS versions prior to 3.5.3. A user who can access the affected product with an administrative privilege may bypass the database restriction set on the query setting page, and connect to a user unintended database...

3.3CVSS5.2AI score0.00641EPSS
SaveExploits0References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/06/01 12:00 a.m.•5 views

CVE-2023-28824: Server-Side Request Forgery (SSRF)

Server-side request forgery vulnerability exists in CONPROSYS HMI System CHS versions prior to 3.5.3. A user who can access the affected product with an administrative privilege may bypass the database restriction set on the query setting page, and connect to a user unintended database...

4.9CVSS5.7AI score0.00641EPSS
SaveExploits0References3
Rows per page
Query Builder