CVE Catalog

CVE-2023-1725

Critical
Published: Translated: NVD NIST

Summary

The Infoline Project Management System has a Server-Side Request Forgery (SSRF) vulnerability that allows attackers to send malicious requests from the server. This issue affects versions before 4.09.31.125.

Risk Assessment

This vulnerability may lead to unauthorized access to the organization's internal network resources, posing a serious threat to data security.

Recommendation

It is recommended to update the Infoline Project Management System to version 4.09.31.125 or later to mitigate the risks associated with this vulnerability.

Original NVD description (English source)

Server-Side Request Forgery (SSRF) vulnerability in Infoline Project Management System allows Server Side Request Forgery. This issue affects Project Management System: before 4.09.31.125.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS