Skip to content
OpenAdvisories

Product · CHANGING Information Technology

RAVA certificate validation system

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2022-39055

    Changing Information Technology Inc. RAVA certificate validation system - Server-Side Request Forgery (SSRF)

    RAVA certificate validation system has inadequate filtering for URL parameter. An unauthenticated remote attacker can perform SSRF attack to discover internal network topology base on query response.

    CHANGING Information Technology RAVA certificate validation system