Lucene search
HistorySep 28, 2022 - 2:15 p.m.
CVE-2022-40083
labstack echo
v4.8.0
open redirect
ssrf
vulnerability
cve-2022-40083
nvd
9.6 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
0.026 Low
EPSS
Percentile
90.4%
Labstack Echo v4.8.0 was discovered to contain an open redirect vulnerability via the Static Handler component. This vulnerability can be leveraged by attackers to cause a Server-Side Request Forgery (SSRF).
Affected configurations
Node
labstackechoMatch4.8.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| labstack:echo | labstack echo | eq | 4.8.0 |
References
Social References
More
Related
nuclei
nuclei
Labstack Echo 4.8.0 - Open Redirect
2022-10-07 16:11:42
osv
osv
Labstack Echo Open Redirect vulnerability
2022-09-29 00:00:26
CVE-2022-40083
2022-09-28 14:15:10
Open redirect in github.com/labstack/echo/v4
2022-10-11 21:29:24
prion
prion
Open redirect
2022-09-28 14:15:00
nvd
nvd
CVE-2022-40083
2022-09-28 14:15:10
cvelist
cvelist
CVE-2022-40083
2022-09-28 13:34:03
github
github
Labstack Echo Open Redirect vulnerability
2022-09-29 00:00:26
cnvd
cnvd
LabStack Echo Open Redirect Vulnerability
2022-09-30 00:00:00
debiancve
debiancve
CVE-2022-40083
2022-09-28 14:15:10
ubuntucve
ubuntucve
CVE-2022-40083
2022-09-28 00:00:00
veracode
veracode
Server-Side Request Forgery (SSRF)
2022-10-03 03:18:08
9.6 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
0.026 Low
EPSS
Percentile
90.4%
Related for CVE-2022-40083