VULNERABILITY INTELLIGENCE

CVE-2022-4130

CVSS score4.5 MEDIUM

EPSS probability0.71%

CISA KEVNot currently listed

Published2022-12-16

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:N

Description

A blind site-to-site request forgery vulnerability was found in Satellite server. It is possible to trigger an external interaction to an attacker's server by modifying the Referer header in an HTTP request of specific resources in the server.

Primary references

secalert@redhat.com — Issue Tracking, Permissions Required, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Issue Tracking, Permissions Required, Vendor Advisory