critical9.8
CVE-2022-39039
aEnrich’s a+HRD has inadequate filtering for specific URL parameter.
Impact
aEnrich’s a+HRD has inadequate filtering for specific URL parameter. An unauthenticated remote attacker can exploit this vulnerability to send arbitrary HTTP(s) request to launch Server-Side Request Forgery (SSRF) attack, to perform arbitrary system command or disrupt service.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Aenrich | A\+Hrd | Versions 6.8, 7.0 |