CVE-2023-39854
09.10.2023, 07:15
The web interface of ATX Ucrypt through 3.5 allows authenticated users (or attackers using default credentials for the admin, master, or user account) to include files via a URL in the /hydra/view/get_cc_url url parameter. There can be resultant SSRF.
| Vendor | Product | Version |
|---|---|---|
| atx | ucrypt | 𝑥 ≤ 3.5 |
𝑥
= Vulnerable software versions