PT-2022-11641
CVE-2021-42637
·
تاريخ النشر
2022-02-02
·
تاريخ التحديث
2022-02-08
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
PrinterLogic Web Stack versions 19.1.1.13 SP9 and below
Description
The issue allows user-controlled input to craft a URL, resulting in a Server Side Request Forgery (SSRF) vulnerability. This means an attacker can potentially force the server to make unintended requests, possibly leading to unauthorized access or information disclosure.
Recommendations
For PrinterLogic Web Stack versions 19.1.1.13 SP9 and below, consider restricting user input to prevent malicious URL crafting until a patch is available.
As a temporary workaround, restrict access to sensitive areas of the web stack to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾