ZJ1983 ZZ Server-Side Request Forgery Vulnerability

A critical server-side request forgery (SSRF) vulnerability has been identified in ZJ1983 ZZ versions prior to August 2024. The issue arises in the file '/import_data_todb', where manipulation of the 'url' argument allows for unauthorized server-side requests. This vulnerability can be exploited remotely.

Impact

Exploitation of this vulnerability allows for server-side request forgery, where an attacker can make the server send requests to internal or external resources, potentially leading to further exploitation or information disclosure.