CVE-2023-37290

· HIGHModified

← All CVEs

CVSS v3.1

7.5

EPSS

0.74%

Published

Jul 20, 2023

Modified

Nov 21, 2024

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

InfoDoc Document On-line Submission and Approval System lacks sufficient restrictions on the available tags within its HTML to PDF conversion function, and allowing an unauthenticated attackers to load remote or local resources through HTML tags such as iframe. This vulnerability allows unauthenticated remote attackers to perform Server-Side Request Forgery (SSRF) attacks, gaining unauthorized access to arbitrary system files and uncovering the internal network topology.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weaknesses (CWE)

CWE-918

Affected Products (2)

infodoc · document_on-line_submission_and_approval_systemvulnerable

References (2)

https://www.twcert.org.tw/tw/cp-132-7226-12195-1.html

Third Party Advisory

https://www.twcert.org.tw/tw/cp-132-7226-12195-1.html

Third Party Advisory

KEV Catalog EPSS Scores Vendors All CVEs