CVE-2022-38580

Katalog CVE

CVSS 9.8 · Critical EPSS 12,0%

Kerentanan Server-Side Request Forgery (SSRF) pada zalando skipper. Skor CVSS 3.1 9.8 (Critical) menurut NVD.

Deskripsi (NVD)

Zalando Skipper v0.13.236 is vulnerable to Server-Side Request Forgery (SSRF).

Rincian

Terbit di NVD

25 Oktober 2022

Terakhir diubah

9 Juli 2026

Status NVD

Modified

CVSS 3.1

9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-918: Server-Side Request Forgery (SSRF)

EPSS (30 hari)

12,0% peluang dieksploitasi; lebih tinggi dari 96,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://gist.github.com/Fadavvi/9fffcfa4aaa9e25b77cfe7b3044b2857#file-cve-2022-38580 advisory pihak ketiga
• https://pastebin.com/dXxpgPAK advisory pihak ketiga
• http://packetstormsecurity.com/files/171546/X-Skipper-Proxy-0.13.237-Server-Side-Request-Forgery.html