External Image Referencing Vulnerability in Dradis by Dradis

CVE-2023-50786

What is CVE-2023-50786?

A vulnerability exists in Dradis up to version 4.16.0 that permits unauthorized reference to external images via HTTPS. This design flaw can be exploited by authenticated users, enabling them to potentially access and compromise the Net-NTLM hashes of other users on a Windows domain network. Such access can lead to credential theft and further network infiltration.

References