PT-2022-11641
CVE-2021-42637
·
Published
2022-02-02
·
Updated
2022-02-08
Description by
CVSS 3.1
9.8
CriticalMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
PrinterLogic Web Stack versions 19.1.1.13 SP9 and below
Description
The issue allows user-controlled input to craft a URL, resulting in a Server Side Request Forgery (SSRF) vulnerability. This means an attacker can potentially force the server to make unintended requests, possibly leading to unauthorized access or information disclosure.
Recommendations
For PrinterLogic Web Stack versions 19.1.1.13 SP9 and below, consider restricting user input to prevent malicious URL crafting until a patch is available.
As a temporary workaround, restrict access to sensitive areas of the web stack to minimize the risk of exploitation.
Found an issue in the description? Have something to add? Feel free to write us 👾