CVE-2022-2756: high-severity vulnerability in kareadita/kavita
Server-Side Request Forgery (SSRF) in kareadita/kavita
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
36Vexday Risk Score
Patch soon. It has a working public exploit.
ssvc Attendcvss 7.1epss 3.5%
Server-Side Request Forgery (SSRF) in GitHub repository kareadita/kavita prior to 0.5.4.1.
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N
Affected products
kareadita · kareadita/kavitaRelated CVEs — kareadita/kavita
In the same product, most dangerous first.
CVE-2022-3993CRITICALImproper Restriction of Excessive Authentication Attempts in kareadita/kavitaEPSS 1.2%CVE-2022-3945CRITICALImproper Restriction of Excessive Authentication Attempts in kareadita/kavitaEPSS 1.0%CVE-2023-0919HIGHMissing Authentication for Critical Function in kareadita/kavitaEPSS 0.5%