Skip to content
OpenAdvisories
Unscored CVE-2023-39854 EUVD-2023-43554GHSA-r6m2-cj32-wg84

The web interface of ATX Ucrypt through 3.5 allows authenticated users (or attackers using default credentials for the admin, master, or us…

Published Oct 9, 2023 · Updated Sep 19, 2024 · Assigned by mitre

Description

The web interface of ATX Ucrypt through 3.5 allows authenticated users (or attackers using default credentials for the admin, master, or user account) to include files via a URL in the /hydra/view/get_cc_url url parameter. There can be resultant SSRF.

References