PT-2022-17527

CVE-2022-25800

·

Published

2022-07-14

·

Updated

2022-07-21

Description by

CVSS 3.1
9.1
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Name of the Vulnerable Software and Affected Versions Best Practical RT for Incident Response (RTIR) versions 4.0.3 and earlier, 5.x versions prior to 5.0.3
Description The issue allows for Server-Side Request Forgery (SSRF) via the whois lookup tool.
Recommendations For versions prior to 4.0.3, update to version 4.0.3 or later. For versions 5.x prior to 5.0.3, update to version 5.0.3 or later.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-918: Server-Side Request Forgery (SSRF)
Related identifiers
CVE-2022-25800
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com