CyberRota Analysis
AI-GeneratedThe Meeting Room Booking System (MRBS) prior to version 1.12.2 is vulnerable to unauthorized access, allowing an attacker to fetch user-supplied private or local URIs without proper validation. This could lead to exposure of sensitive information or unauthorized actions within the system. Organizations using MRBS should prioritize upgrading to version 1.12.2 to mitigate this high-severity risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
The Meeting Room Booking System (MRBS) is a PHP-based application for booking meeting rooms. Prior to version 1.12.2, a user-supplied private/local URI can be made to be fetched without checks. Version 1.12.2 contains a fix. No known workarounds are available.