Submit #161754: SSRF vulnerability of the front desk of comprehensive management platform of Zhejiang Dahua Smart Parkinfo

TitleSSRF vulnerability of the front desk of comprehensive management platform of Zhejiang Dahua Smart Park
DescriptionThe front-end SSRF vulnerability exists in the comprehensive management platform of Zhejiang Dahua Intelligent Park. Attackers can obtain Intranet information of the server through this vulnerability, resulting in Intranet information leakage.The front-end SSRF vulnerability exists in the comprehensive management platform of Zhejiang Dahua Intelligent Park. Attackers can obtain Intranet information of the server through this vulnerability, resulting in Intranet information leakage.
Source⚠️ https://github.com/RCEraser/cve/blob/main/DaHua..md
User
 RCEraser (UID 45540)
Submission05/28/2023 16:42 (3 years ago)
Moderation06/06/2023 12:10 (9 days later)
StatusAccepted
VulDB entry230800 [Dahua Smart Parking Management up to 20230528 /ipms/imageConvert/image fileUrl server-side request forgery]
Points20

Do you know our Splunk app?

Download it now for free!