Em resumo
- CVE-2022-23464 é uma vulnerabilidade ALTO (CVSS 7.5) que afeta com.nepxion:discovery, discovery (nepxion).
- Chance de exploração nos próximos 30 dias (EPSS): 0.73%, maior que 54.6% das vulnerabilidades.
- Ainda não há versão corrigida: acompanhe o aviso do fornecedor em Referências.
Description
Nepxion Discovery is a solution for Spring Cloud. Discovery is vulnerable to a potential Server-Side Request Forgery (SSRF). RouterResourceImpl uses RestTemplate’s getForEntity to retrieve the contents of a URL containing user-controlled input, potentially resulting in Information Disclosure. There is no patch available for this issue at time of publication. There are no known workarounds.
NVD description
Nepxion Discovery is a solution for Spring Cloud. Discovery is vulnerable to a potential Server-Side Request Forgery (SSRF). RouterResourceImpl uses RestTemplate’s getForEntity to retrieve the contents of a URL containing user-controlled input, potentially resulting in Information Disclosure. There is no patch available for this issue at time of publication. There are no known workarounds.
Mais vulnerabilidades de com.nepxion:discovery
Ver tudo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free