NetSight
critical9.8

CVE-2022-47635

Wildix WMS 6 before 6.02.20221216, WMS 5 before 5.04.20221214, and WMS4 before 4.04.45396.23 allows Server-side request forgery (SSRF) via ZohoClient.php.

Impact

Wildix WMS 6 before 6.02.20221216, WMS 5 before 5.04.20221214, and WMS4 before 4.04.45396.23 allows Server-side request forgery (SSRF) via ZohoClient.php.

Affected products

VendorProductAffected versions
WildixWms
from 4.0 before 4.04.45396.23
from 5.0 before 5.04.20221214
from 6.0 before 6.02.20221216

Weakness classification

References