Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
iDocView contains a server-side request forgery vulnerability in its /doc/upload endpoint that allows remote unauthenticated attackers to fetch arbitrary URLs by supplying a hardcoded default token value (testtoken) to bypass authentication. Attackers can exploit the unrestricted URL scheme handling, including file:// URIs, to read arbitrary local files such as operating-system and application configuration files, and to reach internal network hosts and services not otherwise accessible. Exploitation evidence was first observed by the Shadowserver Foundation on 2024-03-26.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
🚨 HIGH Severity CVE-2023-54402 | CVSS 7.5 iDocView SSRF flaw in /doc/upload endpoint. Hardcoded token 'testtoken' bypasses auth, enables file:// URI abuse to read local files & reach internal services. Actively exploited since Mar 2024. #CVE #Vulnerability #PatchNow https://t.co/PmCc8wKNLm