CVE-2022-24449

CVE-2022-24449 Solar Appscreener XXE Suggested description An issue was found in Solar AppScreener SAST tool through 3.10.4. An unauthorized actor, may exploit effected hosts where vulnerable version is installed, by uploading specially crafted XML files on hosts, which has an expired or...

The vulnerability of the Solar appScreener platform, related to an incorrect restriction on the path name to the catalog, allows a violator to execute arbitrary code.

The vulnerability of the Solar appScreener platform is related to an incorrect restriction on the path name to the catalog. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

PT-2026-8000

Уязвимость платформы Solar appScreener связана с несоответствием ответов на входящие запросы. Эксплуатация уязвимости, может позволить нарушителю, действующему удаленно, получить несанкционированный доступ к защищаемой информации...

PT-2026-7999

Уязвимость платформы Solar appScreener связана с некорректной реализацией механизмов аутентификации отправителя электронной почты. Эксплуатация уязвимости, может позволить нарушителю, действующему удаленно, позволяющая нарушителю проводить спуфинг атаки...

PT-2026-7998

Уязвимость платформы Solar appScreener связана с недостаточной проверкой поступающих запросов. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выполнить SSRF-атаку...

The vulnerability of the Solar appScreener platform, related to inconsistencies in responses to incoming requests, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Solar appScreener platform is related to inconsistencies in responses to incoming requests. Exploiting this vulnerability could allow an unauthorized actor to gain unauthorized access to protected information...

The vulnerability of the Solar appScreener platform, related to insufficient verification of incoming requests, allows a hacker to execute an SSRF attack.

The vulnerability of the Solar appScreener platform is related to insufficient verification of incoming requests. Exploiting this vulnerability could allow a remote attacker to execute an SSRF attack...

The vulnerability of the Solar appScreener platform, related to the improper implementation of email sender authentication mechanisms, allows attackers to carry out spoofing attacks.

The vulnerability of the Solar appScreener platform is related to the improper implementation of email sender authentication mechanisms. Exploiting this vulnerability allows a remote attacker to carry out spoofing attacks...

PT-2025-62906

Уязвимость платформы Solar appScreener связана с неверным ограничением имени пути к каталогу. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выполнить произвольный код...

EUVD-2022-29332

Malicious code in bioql PyPI...

CVE-2022-24449

Solar appScreener through 3.10.4, when a valid license is not present, allows XXE and SSRF attacks via a crafted XML document...

The vulnerability of the Solar appScreener platform, which stems from insufficient verification of incoming requests, allows a hacker to execute an SSRF attack.

The vulnerability of the Solar appScreener platform is related to insufficient verification of incoming requests. Exploiting this vulnerability could allow a remote attacker to execute an SSRF attack...

PT-2025-36481

Уязвимость платформы Solar appScreener связана с недостаточной проверкой поступающих запросов. Эксплуатация уязвимости, может позволить нарушителю, действующему удаленно, осуществить SSRF-атаку...

CVE-2022-24449

Solar appScreener through 3.10.4, when a valid license is not present, allows XXE and SSRF attacks via a crafted XML document...

CVE-2022-24449

Solar appScreener through 3.10.4, when a valid license is not present, allows XXE and SSRF attacks via a crafted XML document...

CVE-2022-24449

Solar appScreener through 3.10.4, when a valid license is not present, allows XXE and SSRF attacks via a crafted XML document...

Server side request forgery (ssrf)

Solar appScreener through 3.10.4, when a valid license is not present, allows XXE and SSRF attacks via a crafted XML document...

CVE-2022-24449

The CVE-2022-24449 entry affects Solar appScreener up to version 3.10.4, where a crafted XML document can trigger XXE and SSRF when no valid license is present. This is supported by PT-2022-16705 details naming affected versions and the license requirement as a condition for exploitation. Practic...

CVE-2022-24449

Solar appScreener through 3.10.4, when a valid license is not present, allows XXE and SSRF attacks via a crafted XML document...

CVE-2022-24449: Improper Restriction of XML External Entity Reference

Solar appScreener through 3.10.4, when a valid license is not present, allows XXE and SSRF attacks via a crafted XML document...