CVE-2023-3744
Server-Side Request Forgery in SLiMS
Résumé
Server-Side Request Forgery in SLiMS
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Server-Side Request Forgery vulnerability in SLims version 9.6.0. This vulnerability could allow an authenticated attacker to send requests to internal services or upload the contents of relevant files via the "scrape_image.php" file in the imageURL parameter.
Références
- advisory github.com
- advisory nvd.nist.gov
- web incibe.es