Skip to content
OpenAdvisories
Critical · 9.4 CVE-2023-3654 EUVD-2023-44298GHSA-qg5r-9v52-4mfm

Origin Check Bypass

Published Oct 3, 2023 · Updated Aug 2, 2024 · Assigned by CyberDanube

Description

cashIT! - serving solutions. Devices from "PoS/ Dienstleistung, Entwicklung & Vertrieb GmbH" to 03.A06rks 2023.02.37 are affected by a origin bypass via the host header in an HTTP request. This vulnerability can be triggered by an HTTP endpoint exposed to the network.

Affected products

VendorProductAffectedFixed
PoS/ Dienstleistung, Entwicklung & Vertrieb cashIT! - serving solutions. ≤ 03.A06rks 2023.02.37 —

References