SonicALERT
Search

Sonicwall Signatures

 

Go to All Categories list.


  rConfig doDiff SSRF

Category: WEB-ATTACKS      

rconfig v3.9.4 was discovered to contain a Server-Side Request Forgery (SSRF) via the path_a parameter in the doDiff Function of /classes/compareClass.php. This vulnerability allows authenticated attackers to make arbitrary requests via injection of crafted URLs.


Relevant Information