CVE-2022-28090 - Jspxcms v10.2.0 allows attackers to execute a Server-Side Request Forgery (SSRF) via /cmscp/ext/collect/fetch_url.do?url=

MEDIUM

Jspxcms v10.2.0 allows attackers to execute a Server-Side Request Forgery (SSRF) via /cmscp/ext/collect/fetch_url.do?url=

Published May 4, 2022

6.5

MEDIUM

CVSS 3.1

EPSS 1.07%

Jspxcms v10.2.0 allows attackers to execute a Server-Side Request Forgery (SSRF) via /cmscp/ext/collect/fetch_url.do?url=.

No remediation recorded yet.

Weaknesses (1)

CWE-918

SSRF

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-32575		Advisory
https://gitee.com/jspxcms/Jspxcms/issues/I4ZKDR		x_refsource_MISCExploitIssue TrackingThird Party Advisory

No recorded changes yet.

Sources

Status PUBLISHED

Assigner mitre

Published May 4, 2022

Updated Aug 3, 2024

Reserved Mar 28, 2022

Updated n/a

Status Modified

Modified Jun 17, 2026

Severity n/a

Public date n/a

Assigner mitre

Published May 4, 2022

Updated Aug 3, 2024

Exploited since n/a