PT-2022-11641

CVE-2021-42637

·

Published

2022-02-02

·

Updated

2022-02-08

Description by

CVSS 3.1
9.8
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions PrinterLogic Web Stack versions 19.1.1.13 SP9 and below
Description The issue allows user-controlled input to craft a URL, resulting in a Server Side Request Forgery (SSRF) vulnerability. This means an attacker can potentially force the server to make unintended requests, possibly leading to unauthorized access or information disclosure.
Recommendations For PrinterLogic Web Stack versions 19.1.1.13 SP9 and below, consider restricting user input to prevent malicious URL crafting until a patch is available. As a temporary workaround, restrict access to sensitive areas of the web stack to minimize the risk of exploitation.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾