Lucene search
K

7 matches found

Github Security Blog
Github Security Blog
added 2022/12/27 3:30 p.m.37 views

AWS SDK is vulnerable to server-side request forgery (SSRF)

A vulnerability was found in AWS SDK 2.59.0. It has been rated as critical. This issue affects the function XpathUtils of the file aws-android-sdk-core/src/main/java/com/amazonaws/util/XpathUtils.java of the component XML Parser. The manipulation leads to server-side request forgery. Upgrading to...

9.8CVSS9.1AI score0.00436EPSS
Exploits0References6Affected Software1
OSV
OSV
added 2022/12/27 3:30 p.m.17 views

GHSA-F5H9-QX38-2HGP AWS SDK is vulnerable to server-side request forgery (SSRF)

A vulnerability was found in AWS SDK 2.59.0. It has been rated as critical. This issue affects the function XpathUtils of the file aws-android-sdk-core/src/main/java/com/amazonaws/util/XpathUtils.java of the component XML Parser. The manipulation leads to server-side request forgery. Upgrading to...

9.8CVSS9.6AI score0.00436EPSS
Exploits0References6
OSV
OSV
added 2022/12/27 3:15 p.m.15 views

CVE-2022-4725

A vulnerability was found in AWS SDK 2.59.0. It has been rated as critical. This issue affects the function XpathUtils of the file aws-android-sdk-core/src/main/java/com/amazonaws/util/XpathUtils.java of the component XML Parser. The manipulation leads to server-side request forgery. Upgrading to...

9.8CVSS9.6AI score
Exploits0References4
NVD
NVD
added 2022/12/27 3:15 p.m.14 views

CVE-2022-4725

A vulnerability was found in AWS SDK 2.59.0. It has been rated as critical. This issue affects the function XpathUtils of the file aws-android-sdk-core/src/main/java/com/amazonaws/util/XpathUtils.java of the component XML Parser. The manipulation leads to server-side request forgery. Upgrading to...

9.8CVSS0.00436EPSS
Exploits0References4
Prion
Prion
added 2022/12/27 3:15 p.m.13 views

Server side request forgery (ssrf)

A vulnerability was found in AWS SDK 2.59.0. It has been rated as critical. This issue affects the function XpathUtils of the file aws-android-sdk-core/src/main/java/com/amazonaws/util/XpathUtils.java of the component XML Parser. The manipulation leads to server-side request forgery. Upgrading to...

7.5CVSS9.5AI score0.00436EPSS
Exploits0References4Affected Software1
CVE
CVE
added 2022/12/24 12:0 a.m.103 views

CVE-2022-4725

The CVE-2022-4725 entry concerns the AWS Android SDK core’s XML Parser, specifically the XpathUtils.java function. It enables server-side request forgery (SSRF) due to its manipulation, affecting the XpathUtils component. The issue is fixed by upgrading from version 2.59.0 to 2.59.1; the patch id...

9.8CVSS7.5AI score0.00436EPSS
Exploits0References4Affected Software1
Cvelist
Cvelist
added 2022/12/24 12:0 a.m.15 views

CVE-2022-4725 AWS SDK XML Parser XpathUtils.java XpathUtils server-side request forgery

A vulnerability was found in AWS SDK 2.59.0. It has been rated as critical. This issue affects the function XpathUtils of the file aws-android-sdk-core/src/main/java/com/amazonaws/util/XpathUtils.java of the component XML Parser. The manipulation leads to server-side request forgery. Upgrading to...

5.5CVSS9.8AI score0.00436EPSS
Exploits0References4
Rows per page
Query Builder