CVE-2023-28824

Name of the Vulnerable Software and Affected Versions CONPROSYS HMI System (CHS) versions prior to 3.5.3

Description A server-side request forgery issue exists, allowing an attacker with administrative privileges to bypass database restrictions and connect to unintended databases. The vulnerability is related to insufficient validation of incoming requests, which can be exploited by a remote attacker to perform a server-side request forgery (SSRF) attack.

Recommendations For versions prior to 3.5.3, update to version 3.5.3 or later to resolve the issue.