Lucene search

GoogleOSV:CVE-2022-41495

HistoryOct 13, 2022 - 9:15 p.m.

CVE-2022-41495

2022-10-1321:15:09

Google

osv.dev

clippercms server-side-request-forgery rss-parameter-vulnerability manager-page

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.3 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

68.8%

JSON

ClipperCMS 1.3.3 was discovered to contain a Server-Side Request Forgery (SSRF) via the rss_url_news parameter at /manager/index.php.

CPENameOperatorVersion
clippercmseq1.0.3
clippercmseq0.9.6.2
clippercmseq1.0.6-pl
clippercmseq1.0.1
clippercmseqclipper_1.2.8
clippercmseqclipper_1.1.3
clippercmseq0.1.0-pre3.1
clippercmseq1.0.5
clippercmseq1.0.0
clippercmseqclipper_1.1.0

Name	Operator	Version
clippercms	eq	1.0.3
clippercms	eq	0.9.6.2
clippercms	eq	1.0.6-pl
clippercms	eq	1.0.1
clippercms	eq	clipper_1.2.8
clippercms	eq	clipper_1.1.3
clippercms	eq	0.1.0-pre3.1
clippercms	eq	1.0.5
clippercms	eq	1.0.0
clippercms	eq	clipper_1.1.0

Rows per page:

1-10 of 361

References

github.com/jayus0821/insight/blob/master/ClipperCMS%20SSRF2.md

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.3 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

68.8%

JSON

Related for OSV:CVE-2022-41495