CVE-2023-24243

HIGHNuclei

CData RSB Connect v22.0.8336 - Server Side Request Forgery

Title source: github.com
STIX 2.1 vulnerability

Record summary

CVE-2023-24243 has a selected CVSS score of 7.5 (high); EIP currently links 1 Nuclei template.

Description

CData RSB Connect v22.0.8336 was discovered to contain a Server-Side Request Forgery (SSRF).

Description source: CVE List

Exploitation context

Available material

Nuclei templates
1

CISA SSVC decision

ExploitationPoC
AutomatableYes
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Dec 12, 2024 · Source: CVE List

Nuclei templates

1
ProjectDiscoveryHIGHCData RSB Connect v22.0.8336 - Server Side Request ForgeryCVSS 7.5

CData RSB Connect v22.0.8336 was discovered to contain a Server-Side Request Forgery (SSRF).

Impact

Successful exploitation of this vulnerability could allow an attacker to send arbitrary requests from the server, potentially leading to unauthorized access or data leakage.

Remediation

Apply the latest security patches or updates provided by CData to fix the SSRF vulnerability in RSB Connect v22.0.8336.

WeaknessesCWE-918
Authorsritikchaddha
Template tagscvecve2023cdatarsbssrfvuln
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CPE: cpe:2.3:a:cdata:arc:*:*:*:*:*:*:*:*
Shodan: http.favicon.hash:163538942
Shodan: http.favicon.hash:"163538942"
FOFA: icon_hash="163538942"
https://twitter.com/W01fh4cker/status/1669890019191037952 https://gist.github.com/d3vc0r3/6460a5f006e32a2ebffe739e411ab1b8 https://nvd.nist.gov/vuln/detail/CVE-2023-24243 https://arc.cdata.com/ https://arc.cdata.com/trial/

Source: ProjectDiscovery

References

5