medium6.5
CVE-2023-39854
The web interface of ATX Ucrypt through 3.5 allows authenticated users (or attackers using default credentials for the admin, master, or user account) to inclu…
Impact
The web interface of ATX Ucrypt through 3.5 allows authenticated users (or attackers using default credentials for the admin, master, or user account) to include files via a URL in the /hydra/view/get_cc_url url parameter. There can be resultant SSRF.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Atx | Ucrypt | through 3.5 |