CVE-2023-1725 SSRF in Infoline Project Management System
Attackers can exploit SSRF in Infoline Project Management System to access internal resources or bypass security controls.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2023-1725?
CVE-2023-1725 is a critical server-side request forgery vulnerability in Infoline Project Management System, published on 30 Mar 2023. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Server-Side Request Forgery (SSRF) vulnerability in Infoline Project Management System allows Server Side Request Forgery.
This issue affects Project Management System: before 4.09.31.125.
Weakness: CWE-918
Which versions are affected by CVE-2023-1725?
It affects 1 product.
Products include Infoline-Tr Project Management System.
How do I fix CVE-2023-1725?
No fix has been published for CVE-2023-1725 yet. Limit exposure of the affected software until one is available.
Upgrade, and send outbound requests through an allow-list that blocks internal addresses. More about Server-side request forgery.
Is CVE-2023-1725 being exploited?
There is no known exploitation of CVE-2023-1725 in the wild and no public exploit code.
Sources
Also known as GHSA-6c4p-f5hf-9795.