CVE-2023-39854

Publication date

2023-10-09 00:00:00

Family

mitre

State

PUBLISHED

Description

The web interface of ATX Ucrypt through 3.5 allows authenticated users (or attackers using default credentials for the admin, master, or user account) to include files via a URL in the /hydra/view/get_cc_url url parameter. There can be resultant SSRF.