7 matches found
CVE-2023-49471
Blind Server-Side Request Forgery SSRF vulnerability in karlomikus Bar Assistant before version 3.2.0 does not validate a parameter before making a request through Image::make, which could allow authenticated remote attackers to execute arbitrary code...
Server side request forgery (ssrf)
Blind Server-Side Request Forgery SSRF vulnerability in karlomikus Bar Assistant before version 3.2.0 does not validate a parameter before making a request through Image::make, which could allow authenticated remote attackers to execute arbitrary code...
CVE-2023-49471
Blind Server-Side Request Forgery SSRF vulnerability in karlomikus Bar Assistant before version 3.2.0 does not validate a parameter before making a request through Image::make, which could allow authenticated remote attackers to execute arbitrary code...
CVE-2023-49471
CVE-2023-49471 is a Blind SSRF in the karlomikus Bar Assistant prior to version 3.2.0. The issue arises because a parameter is not validated before making a request via Image::make(), potentially allowing authenticated remote attackers to execute arbitrary code. Affected software/version: karlomi...
CVE-2023-49471: Server-Side Request Forgery (SSRF)
Blind Server-Side Request Forgery SSRF vulnerability in karlomikus Bar Assistant before version 3.2.0 does not validate a parameter before making a request through Image::make, which could allow authenticated remote attackers to execute arbitrary code...
PT-2024-13739 · Unknown · Karlomikus Bar Assistant
Name of the Vulnerable Software and Affected Versions: karlomikus Bar Assistant versions prior to 3.2.0 Description: The issue is related to a Blind Server-Side Request Forgery SSRF vulnerability. It does not validate a parameter before making a request through Image::make, which could allow...
CVE-2023-49471
Blind Server-Side Request Forgery SSRF vulnerability in karlomikus Bar Assistant before version 3.2.0 does not validate a parameter before making a request through Image::make, which could allow authenticated remote attackers to execute arbitrary code...