CyberSecBulletin

Barassistant vulnerabilities

We track 1 vulnerability in Barassistant products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on January 10, 2024.

1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score

Latest Barassistant vulnerabilities

  • 8.8 High severity

    Bar Assistant: Server-Side Request Forgery

    CVE-2023-49471BarassistantEPSS 1.13%

    Blind Server-Side Request Forgery (SSRF) vulnerability in karlomikus Bar Assistant before version 3.2.0 does not validate a parameter before making a request through Image::make(), which could allow authenticated remote attackers to execute arbitrary code.