Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2022-39039

aEnrich a+HRD - Server-Side Request Forgery (SSRF)

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
twcert

Description

aEnrich’s a+HRD has inadequate filtering for specific URL parameter. An unauthenticated remote attacker can exploit this vulnerability to send arbitrary HTTP(s) request to launch Server-Side Request Forgery (SSRF) attack, to perform arbitrary system command or disrupt service.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

aEnrich a+HRD

  • 6.8 to ≤ 7.0affected

References