critical9.4
CVE-2023-3654
cashIT!
Impact
cashIT! - serving solutions. Devices from "PoS/ Dienstleistung, Entwicklung & Vertrieb GmbH" to 03.A06rks 2023.02.37 are affected by a origin bypass via the host header in an HTTP request. This vulnerability can be triggered by an HTTP endpoint exposed to the network.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cashit | Cashit\! | through 03.a06rks_2023.02.37 |