← Database

CVE-2022-28117

MEDIUM CVSS: 4.9 Published: 2022-04-28 Modified: 2026-06-17

Description

A Server-Side Request Forgery (SSRF) in feed_parser class of Navigate CMS v2.9.4 allows remote attackers to force the application to make arbitrary requests via injection of arbitrary URLs into the feed parameter.

Affected Platforms

Naviwebs Navigate Cms

Weakness Type

CWE-918

References