Description

CData RSB Connect v22.0.8336 was discovered to contain a Server-Side Request Forgery (SSRF).

Classification

CVE ID: CVE-2023-24243

CVSS Base Severity: LOW

CVSS Base Score: 0.0

Affected Products

Vendor: n/a

Product: n/a

Nuclei Template

http/cves/2023/CVE-2023-24243.yaml

Exploit Prediction Scoring System (EPSS)

EPSS Score: 4.63% (probability of being exploited)

EPSS Percentile: 92.57% (scored less or equal to compared to others)

EPSS Date: 2025-02-04 (when was this score calculated)

References

https://arc.cdata.com/
https://arc.cdata.com/trial/
https://www.cdata.com/kb/entries/netembeddedserver-notice.rst
https://gist.github.com/d3vc0r3/6460a5f006e32a2ebffe739e411ab1b8

Timeline