| Package | Affected versions | Patched versions |
|---|---|---|
| iot gateway software | < 9.3.0 | 9.3.0 |
| prosyst mbs sdk | < 8.2.6 | 8.2.6 |
A Server-Side Request Forgery (SSRF) vulnerability in the backup & restore functionality in earlier versions than ProSyst mBS SDK 8.2.6 and Bosch IoT Gateway Software 9.3.0 allows a remote attacker to forge GET requests to arbitrary URLs. In addition, this could potentially allow an attacker to read sensitive zip files from the local server.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free