Vulnerabilities (CVE)

Filtered by vendor Barassistant Subscribe
Filtered by product Bar Assistant
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-49471 1 Barassistant 1 Bar Assistant 2024-11-21 N/A 8.8 HIGH
Blind Server-Side Request Forgery (SSRF) vulnerability in karlomikus Bar Assistant before version 3.2.0 does not validate a parameter before making a request through Image::make(), which could allow authenticated remote attackers to execute arbitrary code.