CVE-2022-40296

The application was vulnerable to a Server-Side Request Forgery attacks, allowing the backend server to interact with unexpected endpoints, potentially including internal and local services, leading to attacks in other downstream systems.

Score

CVSS 3.1 9.8 Critical

Status

Modified - vdp@themissinglink.com.au

Published

2022-10-31

Last modified

2025-05-06

Weaknesses

CWE-918

Affected products

• Php Point Of Sale (Php Point Of Sale Llc)
• Php Point Of Sale (Phppointofsale)

References

• https://www.themissinglink.com.au/security-advisories/cve-2022-40296