CVE-2022-39055 — Changing Information Technology Inc. RAVA certificate validation system - Server-Side Request Forgery (SSRF)

CVE-2022-39055

Changing Information Technology Inc. RAVA certificate validation system - Server-Side Request Forgery (SSRF) PUBLISHED

Description (CNA)

RAVA certificate validation system has inadequate filtering for URL parameter. An unauthenticated remote attacker can perform SSRF attack to discover internal network topology base on query response.

Affected (CNA)

Vendor / product	Versions
Changing Information Technology Inc. / RAVA certificate validation system	affected 3

CWE

CWE-918

References

https://www.twcert.org.tw/tw/cp-132-6616-9092f-1.html

ADP enrichment

CVE

No English description supplied.

https://www.twcert.org.tw/tw/cp-132-6616-9092f-1.html

CISA-ADP

No English description supplied.

No references supplied.