Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 06:44:28 +0000 CVE-2023-45152 — Blind Server Side Request Forgery (SSRF) in remote schedule import feature in Engelsystem https://cve.radiocsirt.org/vuln/cve-2023-45152 <p><strong>Affected:</strong> engelsystem</p> <p>Engelsystem is a shift planning system for chaos events. A Blind SSRF in the &#34;Import schedule&#34; functionality makes it possible to perform a port scan against the local environment. This vulnerability has been fixed in commit ee7d30b33. If a patch cannot be deployed, operators should ensure that no HTTP(s) services listen on localhost and/or systems only reachable from the host running the engelsystem software. If such services are necessary, they should utilize additional authentication.</p> <p><strong>Affected:</strong> engelsystem</p> <p>Engelsystem is a shift planning system for chaos events. A Blind SSRF in the &#34;Import schedule&#34; functionality makes it possible to perform a port scan against the local environment. This vulnerability has been fixed in commit ee7d30b33. If a patch cannot be deployed, operators should ensure that no HTTP(s) services listen on localhost and/or systems only reachable from the host running the engelsystem software. If such services are necessary, they should utilize additional authentication.</p> https://cve.radiocsirt.org/vuln/cve-2023-45152