by Kastro
Paper/Archive/CVE-2022-1592

CVE-2022-1592

clinical-genomics clinical-genomics/scout — Server-Side Request Forgery in scout in clinical-genomics/scout

EPSS 1%CVSS 9.4
critical.is priorityof 100
42
CVSS 9.4 (CNA)9.4 / 10 × 3028.2Not in CISA KEV+300.0EPSS percentile 71.0.711 × 2014.2No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

Server-Side Request Forgery in scout in GitHub repository clinical-genomics/scout prior to v4.42. An attacker could make the application perform arbitrary requests to fishing steal cookie, request to private area, or lead to xss...

Affected

ProductAffectedFixed inSource
clinical-genomics/scoutunspecified – < v4.42v4.42CNA

Scores by source

@huntrdev (CNA)9.4CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L

References

refhuntr.dev/bounties/352b39da-0f2e-415a-9793-5480cae8bd27refgithub.com/clinical-genomics/scout/commit/b0ef15f4737d0c801154c1991b52ff5cab4f5c83