Skip to content
OpenAdvisories

Vendor

Nepxion

2 known vulnerabilities.

Products

Discover 1 Discovery 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.3
    CVE-2022-23464

    Potential Server Side Request Forgery (SSRF) in Nepxion Discovery

    Nepxion Discovery is a solution for Spring Cloud. Discovery is vulnerable to a potential Server-Side Request Forgery (SSRF). RouterResourceImpl uses RestTemplate’s getForEntity to retrieve the contents of a URL containing user-controlled input, potentially re…

    Nepxion Discovery com.nepxion:discovery Maven