critical9.8
CVE-2022-40296
The application was vulnerable to a Server-Side Request Forgery attacks, allowing the backend server to interact with unexpected endpoints, potentially includi…
Impact
The application was vulnerable to a Server-Side Request Forgery attacks, allowing the backend server to interact with unexpected endpoints, potentially including internal and local services, leading to attacks in other downstream systems.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Phppointofsale | Php Point Of Sale | Version 19.0 |