← back
CVE-2023-31456

CVE-2023-31456

CVSS 5.4 MEDIUMEPSS 0.2%CWE-918
There is an SSRF vulnerability in the Fluid Topics platform that affects versions prior to 4.3, where the server can be forced to make arbitrary requests to internal and external resources by an authenticated user.
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Affected products
n/a · n/a

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://antidot.net/blog/https://doc.fluidtopics.com/r/Fluid-Topics-Release-Notes/June-10th-2024