CVE-2022-40083criticalCWE-601

CVE-2022-40083

43Vexday Risk Score

Corrige pronto. Ella tiene exploit funcional público.

ssvc Attendcvss 9.6epss 2.6%

probabilidad de explotación

2.6%top 16% de las CVE

explotación observada

noninguna fuente lo reporta

Labstack Echo v4.8.0 was discovered to contain an open redirect vulnerability via the Static Handler component. This vulnerability can be leveraged by attackers to cause a Server-Side Request Forgery (SSRF).

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Productos afectados

n/a · n/a

Referencias

https://github.com/labstack/echo/issues/2259