CVE-2022-40296 — Server-side request forgery (SSRF) in PHP Point of Sale version 19.0, by PHP Point of Sale, LLC.

CVE-2022-40296

Server-side request forgery (SSRF) in PHP Point of Sale version 19.0, by PHP Point of Sale, LLC. PUBLISHED

Description (CNA)

The application was vulnerable to a Server-Side Request Forgery attacks, allowing the backend server to interact with unexpected endpoints, potentially including internal and local services, leading to attacks in other downstream systems.

Affected (CNA)

Vendor / product	Versions
PHP Point of Sale LLC / PHP Point of Sale	affected 19.0

CWE

CWE-918

References

https://www.themissinglink.com.au/security-advisories/cve-2022-40296

ADP enrichment

CVE

No English description supplied.

https://www.themissinglink.com.au/security-advisories/cve-2022-40296

CISA-ADP

No English description supplied.

No references supplied.