Security Advisory

CVE-2022-23464

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2022-09-24 04:40:08

Last updated 2025-04-22 17:20:45

Assigner GitHub_M

CVSS score 4.3

State PUBLISHED

Description

Nepxion Discovery is a solution for Spring Cloud. Discovery is vulnerable to a potential Server-Side Request Forgery (SSRF). RouterResourceImpl uses RestTemplate’s getForEntity to retrieve the contents of a URL containing user-controlled input, potentially resulting in Information Disclosure. There is no patch available for this issue at time of publication. There are no known workarounds.

← Browse all CVEs View on cve.org ↗