Security Advisory

CVE-2023-39854

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2023-10-09 00:00:00

Last updated 2024-09-19 15:56:29

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

The web interface of ATX Ucrypt through 3.5 allows authenticated users (or attackers using default credentials for the admin, master, or user account) to include files via a URL in the /hydra/view/get_cc_url url parameter. There can be resultant SSRF.

← Browse all CVEs View on cve.org ↗