CVE-2022-4130
published 2022-12-16CVE-2022-4130: A blind site-to-site request forgery vulnerability was found in Satellite server. It is possible to trigger an external interaction to an attacker's server by…
PriorityP419medium4.5CVSS 3.1
AVNACLPRHUIRSUCNIHAN
EPSS
0.67%
47.6th percentile
A blind site-to-site request forgery vulnerability was found in Satellite server. It is possible to trigger an external interaction to an attacker's server by modifying the Referer header in an HTTP request of specific resources in the server.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| redhat | satellite | — | — |
| redhat | satellite | — | — |
| redhat | satellite | — | — |
CVSS provenance
nvdv3.14.5MEDIUMCVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:N
vendor_redhat4.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
satellite: Blind SSRF via Referer header
vendor_redhat·2023-01-16·CVSS 4.5
CVE-2022-4130 [MEDIUM] CWE-918 satellite: Blind SSRF via Referer header
satellite: Blind SSRF via Referer header
A blind site-to-site request forgery vulnerability was found in Satellite server. It is possible to trigger an external interaction to an attacker's server by modifying the Referer header in an HTTP request of specific resources in the server.
A blind site-to-site request forgery vulnerability was found in Satellite server. It is possible to trigger an external interaction to an attacker's server by modifying the Referer header in an HTTP request of specific resources in the server.
GHSA
GHSA-qq54-c3p8-j5hg: A blind site-to-site request forgery vulnerability was found in Satellite server
ghsa_unreviewed·2022-12-21
CVE-2022-4130 [HIGH] GHSA-qq54-c3p8-j5hg: A blind site-to-site request forgery vulnerability was found in Satellite server
A blind site-to-site request forgery vulnerability was found in Satellite server. It is possible to trigger an external interaction to an attacker's server by modifying the Referer header in an HTTP request of specific resources in the server.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2022-12-16
Published