CVE-2023-48910

Microcks up to 1.17.1 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /jobs and /artifact/download. This vulnerability allows attackers to access network resources and sensitive information via a crafted GET request.

• CWE-918
• CWE-918

• https://gist.github.com/b33t1e/2a2dc17cf36cd741b2c99425c892d826Exploit, Third Party Advisory
• https://github.com/microcks/microcksProduct
• https://github.com/orgs/microcks/discussions/892Exploit, Issue Tracking, Third Party Advisory
• https://gist.github.com/b33t1e/2a2dc17cf36cd741b2c99425c892d826Exploit, Third Party Advisory
• https://github.com/microcks/microcksProduct
• https://github.com/orgs/microcks/discussions/892Exploit, Issue Tracking, Third Party Advisory

Published

Dec 4, 2023

Last Modified

Jun 17, 2026

Status

Modified

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-48901A SQL injection vulnerability in tramyardg Autoexpress versi…9.8
• CVE-2023-48902An issue was discovered in tramyardg autoexpress version 1.3…9.8
• CVE-2023-48903Stored Cross-Site Scripting (XSS) vulnerability in tramyardg…6.1
• CVE-2023-48906Stack Overflow vulnerability in Btstack 1.6 and earlier allo…4.3
• CVE-2023-48909An issue was discovered in Jave2 version 3.3.1, allows attac…8.8
• CVE-2023-4891 A potential use-after-free vulnerability was reported in th…5.5
• CVE-2023-48912Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Re…8.8
• CVE-2023-48913Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Re…8.8
• CVE-2023-48914Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Re…8.8
• CVE-2023-4892Teedy v1.11 has a vulnerability in its text editor that allo…4.6
• CVE-2023-48925SQL injection vulnerability in Buy Addons bavideotab before …9.8
• CVE-2023-48926An issue in 202 ecommerce Advanced Loyalty Program: Loyalty …5.3