CVE-2022-31188

🗓️ 01 Aug 2022 00:00:00Reported by GitHub_MType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 71 Views🌐 WEB

CVAT 2.0.0 fixes SSRF vulnerabilit

Reporter	Title	Published	Views	Family All 12
0day.today	CVAT 2.0 - Server Side Request Forgery Vulnerability	11 Nov 202200:00	–	zdt
Circl	CVE-2022-31188	2 Aug 202200:17	–	circl
CNNVD	CVAT 代码问题漏洞	1 Aug 202200:00	–	cnnvd
Cvelist	CVE-2022-31188 Server-Side Request Forgery Vulnerability in Computer Vision Annotation Tool (CVAT)	1 Aug 202200:00	–	cvelist
Exploit DB	CVAT 2.0 - Server Side Request Forgery	11 Nov 202200:00	–	exploitdb
NVD	CVE-2022-31188	1 Aug 202220:15	–	nvd
OSV	CVE-2022-31188 Server-Side Request Forgery Vulnerability in Computer Vision Annotation Tool (CVAT)	1 Aug 202200:00	–	osv
Packet Storm	CVAT 2.0 Server-Side Request Forgery	11 Nov 202200:00	–	packetstorm
Prion	Server side request forgery (ssrf)	1 Aug 202220:15	–	prion
Positive Technologies	PT-2022-5432 · Cvat · Cvat	1 Aug 202200:00	–	ptsecurity

NVD

Vulners

Node

cvat computer_vision_annotation_toolRange<2.0.0

[
  {
    "vendor": "cvat-ai",
    "product": "cvat",
    "versions": [
      {
        "version": "< 2.0.0",
        "status": "affected"
      }
    ]
  }
]

Source	Link
packetstormsecurity	www.packetstormsecurity.com/files/169814/CVAT-2.0-Server-Side-Request-Forgery.html
github	www.github.com/cvat-ai/cvat/commit/6fad1764efd922d99dbcda28c4ee72d071aa5a07
github	www.github.com/cvat-ai/cvat/security/advisories/GHSA-7vpj-j5xv-29pr