CVE-2023-39109: SSRF
Published Aug 1, 2023
·Updated
rconfig v3.9.4 was discovered to contain a Server-Side Request Forgery (SSRF) via the patha parameter in the doDiff Function of /classes/compareClass.php. This vulnerability allows authenticated attackers to make arbitrary requests via injection of crafted URLs.
Affected Software
1 affected component
rConfig rConfig=3.9.4
Event History
Aug 1, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is CVE-2023-39109?
CVE-2023-39109 is a Server-Side Request Forgery (SSRF) vulnerability in rconfig v3.9.4.
2
How severe is CVE-2023-39109?
CVE-2023-39109 has a severity score of 8.8, which is considered high.
3
Which software versions are affected by CVE-2023-39109?
rconfig v3.9.4 is the affected version of the software.
4
What is the CWE of CVE-2023-39109?
The CWE of CVE-2023-39109 is CWE-918.
5
How can I fix CVE-2023-39109?
To fix CVE-2023-39109, update rconfig to a version that has the vulnerability patched.