VULNERABILITY INTELLIGENCE

CVE-2022-40296

CVSS score9.8 CRITICAL

EPSS probability0.75%

CISA KEVNot currently listed

Published2022-10-31

Last modified2026-06-17

Description

The application was vulnerable to a Server-Side Request Forgery attacks, allowing the backend server to interact with unexpected endpoints, potentially including internal and local services, leading to attacks in other downstream systems.