CVE-2023-3744
Server-Side Request Forgery in SLiMS
概要
Server-Side Request Forgery in SLiMS
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Server-Side Request Forgery vulnerability in SLims version 9.6.0. This vulnerability could allow an authenticated attacker to send requests to internal services or upload the contents of relevant files via the "scrape_image.php" file in the imageURL parameter.
参照URL
- advisory github.com
- advisory nvd.nist.gov
- web incibe.es