Description
An XML external entity (XXE) injection vulnerability in Kwoksys Kwok Information Server before v2.9.5.SP31 allows remote authenticated users to conduct server-side request forgery (SSRF) attacks.
Medium · 4.9
CVE-2022-45326
EUVD-2022-48225GHSA-ggpq-cprg-v67r
An XML external entity (XXE) injection vulnerability in Kwoksys Kwok Information Server before v2.9.5.SP31 allows remote authenticated user…
Published Dec 6, 2022 · Updated Apr 23, 2025 · Assigned by mitre