CVE-2022-39055
Changing Information Technology Inc. RAVA certificate validation system - Server-Side Request Forgery (SSRF)
- State
- Published
- Severity
- 5.3 Medium
- Published
- Oct 18, 2022
- Updated
- May 9, 2025
- Reserved
- Aug 31, 2022
Description
RAVA certificate validation system has inadequate filtering for URL parameter. An unauthenticated remote attacker can perform SSRF attack to discover internal network topology base on query response.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 5.3 Medium | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N | twcert |
Weaknesses
- CWE-918 Server-Side Request Forgery (SSRF)
Affected Products
| Product | Versions |
|---|---|
RAVA certificate validation systemChanging Information Technology Inc. |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.