Server-Side Request Forgery Vulnerability in CData RSB Connect
CVE-2023-24243

7.5HIGH

Key Information:

Vendor

Cdata

Status
Arc
Vendor
CVE Published:
16 June 2023

What is CVE-2023-24243?

CData RSB Connect version 22.0.8336 has been identified with a vulnerability that allows for Server-Side Request Forgery (SSRF). This security flaw could enable an attacker to send arbitrary requests from the server, potentially compromising sensitive data and exposing internal resources. Administrators should apply mitigation measures and updates to safeguard their systems against this type of vulnerability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://arc.cdata.com/
https://arc.cdata.com/trial/
https://www.cdata.com/kb/entries/netembeddedserver-notice...

EPSS Score

88% chance of being exploited in the next 30 days.

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.