CVE-2022-24449

CRITICAL CVSS: 9.8 Published: 2022-04-28 Modified: 2026-06-17

Description

Solar appScreener through 3.10.4, when a valid license is not present, allows XXE and SSRF attacks via a crafted XML document.

Affected Platforms

Rt-Solar Solar Appscreener

Weakness Type

CWE-611, CWE-918

References