CVE-2022-24449

Solar appScreener through 3.10.4, when a valid license is not present, allows XXE and SSRF attacks via a crafted XML document.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2022-04-28

Last modified

2024-08-03

Weaknesses

CWE-611, CWE-918

Affected products

• Solar Appscreener (Rt-solar)

References

• https://en.rt-solar.ru/products/solarAPPscreener/
• https://github.com/jet-pentest/CVE-2022-24449