PT-2023-17194 · Unknown · Infoline Project Management System

CVE-2023-1725 · Publicado 2023-03-30 · Atualizado 2026-05-22

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Infoline Project Management System versions prior to 4.09.31.125

Description The issue is a Server-Side Request Forgery (SSRF) vulnerability in the Infoline Project Management System, allowing Server Side Request Forgery.

Recommendations For versions prior to 4.09.31.125, update to version 4.09.31.125 or later to resolve the issue.

Correção

SSRF

Enumeração de Fraquezas

CWE-918

Identificadores relacionados

CVE-2023-1725

Produtos afetados

Infoline Project Management System

Referências · 8

• https://nvd.nist.gov/vuln/detail/CVE-2023-1725 · Nota de Segurança
• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-23-0187 · Nota
• https://usom.gov.tr/bildirim/tr-23-0187 · Nota
• https://osv.dev/vulnerability/CVE-2023-1725 · Aviso do Fabricante
• https://t.me/cibsecurity/61176 · Publicação no Telegram
• https://t.me/cveNotify/164575 · Publicação no Telegram
• https://t.me/cvenotify/47593 · Publicação no Telegram
• https://t.me/cvenotify/47167 · Publicação no Telegram