Vulnerability CVE-2022-32457


Published: 2022-07-20

Description:
Digiwin BPM has inadequate filtering for URL parameter. An unauthenticated remote attacker can perform Blind SSRF attack to discover internal network topology base on URL error response.

 References:
https://www.twcert.org.tw/tw/cp-132-6287-20ef0-1.html

Copyright 2026, cxsecurity.com

 

Back to Top