CVE-2023-39109

rconfig v3.9.4 was discovered to contain a Server-Side Request Forgery SSRF via the patha parameter in the doDiff Function of /classes/compareClass.php. This vulnerability allows authenticated attackers to make arbitrary requests via injection of crafted URLs...

PT-2023-26785

Name of the Vulnerable Software and Affected Versions rconfig version 3.9.4 Description The issue is related to a Server-Side Request Forgery SSRF that allows authenticated attackers to make arbitrary requests via injection of crafted URLs. This is achieved through the path a parameter in the...