Blind Server-Side Request Forgery (SSRF) vulnerability in karlomikus Bar Assistant before version 3.2.0 does not validate a parameter before making a request through Image::make(), which could allow authenticated remote attackers to execute arbitrary code.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://github.com/zunak/CVE-2023-49471 |
Configurations
No configuration.
Information
Published : 2024-01-10 09:15
Updated : 2024-01-10 13:56
NVD link : CVE-2023-49471
Mitre link : CVE-2023-49471
JSON object : View
Products Affected
No product.
CWE
No CWE.
