cve/2023/CVE-2023-49471.md
2024-06-22 09:37:59 +00:00

769 B

CVE-2023-49471

Description

Blind Server-Side Request Forgery (SSRF) vulnerability in karlomikus Bar Assistant before version 3.2.0 does not validate a parameter before making a request through Image::make(), which could allow authenticated remote attackers to execute arbitrary code.

POC

Reference

Github