SSRF in B&r Industrial Automation Gmbh Aprol

CVE-2024-10207

A Server-Side Request Forgery vulnerability in the APROL Web Portal used in B&R APROL <4.4-00P5 may allow an authenticated network-based attacker to force the web server to request arbitrary URLs.

Vulnerability class: SSRF (Server-Side Request Forgery)

EPSS: 0.003 (25.5th percentile) — read the EPSS interpretation.