Lucene search
HistoryJan 12, 2023 - 11:15 p.m.
CVE-2022-25026
server-side request forgery
rocket trufusion portal
remote attack
sensitive resources
internal network access
crafted http request
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
0.005 Low
EPSS
Percentile
77.3%
A Server-Side Request Forgery (SSRF) in Rocket TRUfusion Portal v7.9.2.1 allows remote attackers to gain access to sensitive resources on the internal network via a crafted HTTP request to /trufusionPortal/upDwModuleProxy.
Affected configurations
Node
rocketsoftwaretrufusion_enterpriseRange<7.9.5.1
Related
prion
prion
Server side request forgery (ssrf)
2023-01-12 23:15:00
cve
cve
CVE-2022-25026
2023-01-12 23:15:09
cvelist
cvelist
CVE-2022-25026
2023-01-12 00:00:00
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
0.005 Low
EPSS
Percentile
77.3%
Related for NVD:CVE-2022-25026