Lucene search
+L

4 matches found

NVD
NVD
•added 2022/12/18 4:15 a.m.•31 views

CVE-2022-47514

An XML external entity XXE injection vulnerability in XML-RPC.NET before 2.5.0 allows remote authenticated users to conduct server-side request forgery SSRF attacks, as demonstrated by a pingback.aspx POST request...

8.8CVSS0.01252EPSS
SaveExploits1References2
Prion
Prion
•added 2022/12/18 4:15 a.m.•23 views

Design/Logic Flaw

An XML external entity XXE injection vulnerability in XML-RPC.NET before 2.5.0 allows remote authenticated users to conduct server-side request forgery SSRF attacks, as demonstrated by a pingback.aspx POST request...

6.5CVSS8.4AI score0.01252EPSS
SaveExploits1References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/18 12:00 a.m.•6 views

CVE-2022-47514: Improper Restriction of XML External Entity Reference

An XML external entity XXE injection vulnerability in XML-RPC.NET before 2.5.0 allows remote authenticated users to conduct server-side request forgery SSRF attacks, as demonstrated by a pingback.aspx POST request...

8.8CVSS5.9AI score0.01252EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2022/12/18 12:00 a.m.•31 views

CVE-2022-47514

An XML external entity XXE injection vulnerability in XML-RPC.NET before 2.5.0 allows remote authenticated users to conduct server-side request forgery SSRF attacks, as demonstrated by a pingback.aspx POST request...

8.7AI score0.01252EPSS
SaveExploits1References2
Rows per page
Query Builder