Security Advisory
CVE-2023-39109
8.8
HIGH
Vulnerability Description
rconfig v3.9.4 was discovered to contain a Server-Side Request Forgery (SSRF) via the path_a parameter in the doDiff Function of /classes/compareClass.php. This vulnerability allows authenticated attackers to make arbitrary requests via injection of crafted URLs.
Published Date
August 1, 2023
Official Source
NIST NVD Advisory