← Database

CVE-2022-45326

MEDIUM CVSS: 4.9 Published: 2022-12-06 Modified: 2026-06-17

Description

An XML external entity (XXE) injection vulnerability in Kwoksys Kwok Information Server before v2.9.5.SP31 allows remote authenticated users to conduct server-side request forgery (SSRF) attacks.

Affected Platforms

Kwoksys Information Server

Weakness Type

CWE-611, CWE-611

References