CVE Daily

CVE-2022-4130

A blind site-to-site request forgery vulnerability was found in Satellite server...

Medium CVSS 4.5

Overview

A blind site-to-site request forgery vulnerability was found in Satellite server. It is possible to trigger an external interaction to an attacker's server by modifying the Referer header in an HTTP request of specific resources in the server.

CWE: N/A Published: 2022-12-16T16:15:25.173
Risk analysis

This vulnerability is rated 🟡 MEDIUM.

  • CVSS: 4.5 (MEDIUM)
  • Detected tags: none (tag impact: LOW)

Recommended actions:

  • Prioritize remediation based on business criticality and exposure.
  • Limit exposure and increase monitoring until fixed.

Recommended tools

Tags