Lucene search
GoogleOSV:CVE-2022-40083HistorySep 28, 2022 - 2:15 p.m.
CVE-2022-40083
2022-09-2814:15:10
Google
osv.dev
4
labstack echo
v4.8.0
open redirect
ssrf
static handler
server-side request forgery
9.6 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
0.026 Low
EPSS
Percentile
90.3%
Labstack Echo v4.8.0 was discovered to contain an open redirect vulnerability via the Static Handler component. This vulnerability can be leveraged by attackers to cause a Server-Side Request Forgery (SSRF).
References
Related
cvelist
cvelist
CVE-2022-40083
2022-09-28 13:34:03
github
github
Labstack Echo Open Redirect vulnerability
2022-09-29 00:00:26
osv
osv
Labstack Echo Open Redirect vulnerability
2022-09-29 00:00:26
Open redirect in github.com/labstack/echo/v4
2022-10-11 21:29:24
prion
prion
Open redirect
2022-09-28 14:15:00
nvd
nvd
CVE-2022-40083
2022-09-28 14:15:10
nuclei
nuclei
Labstack Echo 4.8.0 - Open Redirect
2022-10-07 16:11:42
cnvd
cnvd
LabStack Echo Open Redirect Vulnerability
2022-09-30 00:00:00
debiancve
debiancve
CVE-2022-40083
2022-09-28 14:15:10
cve
cve
CVE-2022-40083
2022-09-28 14:15:10
veracode
veracode
Server-Side Request Forgery (SSRF)
2022-10-03 03:18:08
ubuntucve
ubuntucve
CVE-2022-40083
2022-09-28 00:00:00
9.6 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
0.026 Low
EPSS
Percentile
90.3%
Related for OSV:CVE-2022-40083