CVE-2022-40842

Summary

ndk design NdkAdvancedCustomizationFields 3.5.0 is vulnerable to Server-side request forgery (SSRF) via rotateimg.php.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• http://ndkadvancedcustomizationfields.com
• https://github.com/daaaalllii/cve-s/blob/main/CVE-2022-40842/poc.txt

CISA ADP Vulnrichment

• SSVC:
• Exploitation: poc
  • Automatable: yes
  • Technical Impact: total

References

• https://github.com/daaaalllii/cve-s/blob/main/CVE-2022-40842/poc.txt

• ←Previous
• Next→