← Database

CVE-2022-32457

MEDIUM CVSS: 5.3 Published: 2022-07-20 Modified: 2026-06-17

Description

Digiwin BPM has inadequate filtering for URL parameter. An unauthenticated remote attacker can perform Blind SSRF attack to discover internal network topology base on URL error response.

Affected Platforms

Digiwin Business Process Management

Weakness Type

CWE-918, CWE-918

References