CVE-2023-3654

Summary

cashIT! - serving solutions. Devices from "PoS/ Dienstleistung, Entwicklung & Vertrieb GmbH" to 03.A06rks 2023.02.37 are affected by a origin bypass via the host header in an HTTP request. This vulnerability can be triggered by an HTTP endpoint exposed to the network.

Affected Software

VendorProductVersion RangeStatus
PoS/ Dienstleistung, Entwicklung & Vertrieb GmbHcashIT! - serving solutions.0 <= 03.A06rks 2023.02.37affected

Weaknesses

  • CWE-346: CWE-346 Origin Validation Error

ADP Enrichment

CVE Program Container

Additional References

References