CVE-2020-23534: Masterlab

Critical severity, CVSS 9.8. EPSS: 1.3% chance of exploitation in the next 30 days.

A server-side request forgery (SSRF) vulnerability in Upgrade.php of gopeak masterlab 2.1.5, via the 'source' parameter.

Affected products

• Masterlab Masterlab: version 2.1.5 only

Published 2021-02-25. Last modified 2026-06-17.