Critical severity · published Sep 9, 2022
CVE-2022-40305
A Server-Side Request Forgery issue in Canto Cumulus through 11.1.3 allows attackers to enumerate the internal network, overload network resources, and possibly have unspecified…
9.8
CVSS
1.5%
EPSS
No
On KEV
Description
A Server-Side Request Forgery issue in Canto Cumulus through 11.1.3 allows attackers to enumerate the internal network, overload network resources, and possibly have unspecified other impact via the server parameter to the /cwc/login login form.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.5% · higher than 75% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CA
Canto · Canto
through 11.1.3 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2022-40305
CVE.org
https://www.cve.org/CVERecord?id=CVE-2022-40305
Exploit
https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2022-023.txt
More from Canto
9.8
CVE-2024-4936
Canto <= 3.0.8 - Unauthenticated Remote File Inclusion
9.8
CVE-2024-25096
Improper Control of Generation of Code ('Code Injection') vulnerability in Canto Inc
9.8
CVE-2023-3452
The Canto plugin for WordPress is vulnerable to Remote File Inclusion in versions up to, and including, 3.0.4 via the 'wp_abspath' parameter
7.2
CVE-2020-24063
The Canto plugin 1.3.0 for WordPress allows includes/lib/download.php?subdomain= SSRF
5.3
CVE-2020-28978
The Canto plugin 1.3.0 for WordPress contains blind SSRF vulnerability