Skip to content
OpenAdvisories
Critical · 9.4 Public exploit CVE-2022-1592 EUVD-2022-3889GHSA-g53g-q539-93cvPYSEC-2026-750

Server-Side Request Forgery in scout in clinical-genomics/scout

Published May 5, 2022 · Updated Aug 3, 2024 · Assigned by @huntrdev

Description

Server-Side Request Forgery in scout in GitHub repository clinical-genomics/scout prior to v4.42. An attacker could make the application perform arbitrary requests to fishing steal cookie, request to private area, or lead to xss...

Affected products

VendorProductAffectedFixed
clinical-genomics clinical-genomics/scout unspecified – < v4.42 v4.42

Public exploits

Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.

Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.

GitHub 1 repository

Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.

Affected packages

EcosystemPackageAffectedFixedRecord
PyPI scout-browser < 4.52 4.52 GHSA-g53g-q539-93cv

References