PT-2023-27551 · Joomla · Jcdashboards

CVE-2023-40630

·

Publicado

2023-12-14

·

Atualizado

2024-10-08

CVSS v3.1

9.8

Crítica

VetorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions JCDashboards component for Joomla (affected versions not specified)
Description The issue concerns an unauthenticated Local File Inclusion (LFI) and Server-Side Request Forgery (SSRF) in the JCDashboards component for Joomla. LFI allows an attacker to include files from the server, potentially revealing sensitive information, while SSRF enables an attacker to make requests to internal servers, which could lead to further exploitation. No information is provided about the estimated number of potentially affected devices or real-world incidents where this issue was exploited.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

SSRF

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

CVE-2023-40630

Produtos afetados

Jcdashboards