Lucene search

K
cvelist@huntrdevCVELIST:CVE-2022-2756
HistoryAug 10, 2022 - 3:15 p.m.

CVE-2022-2756 Server-Side Request Forgery (SSRF) in kareadita/kavita

2022-08-1015:15:15
CWE-918
@huntrdev
www.cve.org
1
server-side request forgery
kareadita/kavita
github repository
cve-2022-2756

7.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N

0.016 Low

EPSS

Percentile

87.4%

Server-Side Request Forgery (SSRF) in GitHub repository kareadita/kavita prior to 0.5.4.1.

CNA Affected

[
  {
    "product": "kareadita/kavita",
    "vendor": "kareadita",
    "versions": [
      {
        "lessThan": "0.5.4.1",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

7.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N

0.016 Low

EPSS

Percentile

87.4%

Related for CVELIST:CVE-2022-2756