CVE-2023-39108

CVSS 3.1 Score 8.8 of 10 (high)

Details

Published Aug 1, 2023
Updated: Aug 4, 2023
CWE ID 918

Summary

CVE-2023-39108 is a newly disclosed vulnerability affecting rconfig version 3.9.4. The issue lies in the doDiff Function of /classes/compareClass.php, where a Server-Side Request Forgery (SSRF) can be exploited via the path_b parameter. Authenticated attackers can manipulate this vulnerability by injecting specially crafted URLs, thereby allowing them to make arbitrary requests and potentially gain unauthorized access to sensitive data or systems.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share