Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 17/10/2023 Updated: 30/10/2023

CVSS v3 Base Score: 2.3 | Impact Score: 1.4 | Exploitability Score: 0.8

VMScore: 0

Engelsystem is a shift planning system for chaos events. A Blind SSRF in the "Import schedule" functionality makes it possible to perform a port scan against the local environment. This vulnerability has been fixed in commit ee7d30b33. If a patch cannot be deployed, operators should ensure that no HTTP(s) services listen on localhost and/or systems only reachable from the host running the engelsystem software. If such services are necessary, they should utilize additional authentication.

Vulnerable Product	Search on Vulmon	Subscribe to Product
engelsystem engelsystem

About me 👋 🔎 Job title: Application Security Engineer 🌇 Current location: Moscow, Russia 💥 Certificates: OSCP (November 2021) 💢 CVEs: CVE-2023-45659 CVE-2023-45152 CVE-2023-5838 CVE-2023-5840 🍪 Open for collaboration

CWE-918 https://github.com/engelsystem/engelsystem/commit/ee7d30b33935ea001705f438fec8ffd05734f295 https://github.com/engelsystem/engelsystem/security/advisories/GHSA-jj9g-75wf-6ppf https://nvd.nist.gov https://github.com/sev-hack/sev-hack

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2023-45152

Vulnerability Summary

Github Repositories

References

Vulmon Search

About

Products

Connect