CVE-2023-39108
01.08.2023, 14:15
rconfig v3.9.4 was discovered to contain a Server-Side Request Forgery (SSRF) via the path_b parameter in the doDiff Function of /classes/compareClass.php. This vulnerability allows authenticated attackers to make arbitrary requests via injection of crafted URLs.
| Vendor | Product | Version |
|---|---|---|
| rconfig | rconfig | 3.9.4 |
𝑥
= Vulnerable software versions