CVE-2022-24449

Published April 28th, 2022

View on NVD ↗

CVSS v3

9.8

CRITICAL

CVSS v2

7.5

HIGH

Affected

1

PROJECT

Description

Solar appScreener through 3.10.4, when a valid license is not present, allows XXE and SSRF attacks via a crafted XML document.

jet-pentest/CVE-2022-24449

Solar Appscreener XXE

GitHub