CVE-2022-1592 - CVE House

Status published Critical CVE-2022-1592

Server-Side Request Forgery in scout in clinical-genomics/scout

9.4 CVSS

Vulnerability Description

Server-Side Request Forgery in scout in GitHub repository clinical-genomics/scout prior to v4.42. An attacker could make the application perform arbitrary requests to fishing steal cookie, request to private area, or lead to xss...

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-1592

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from clinical-genomics

View All →

CVE-2022-1554

Path Traversal due to `send_file` call in clinical-genomics/scout

Medium 6.8

Affected Vendor

clinical-genomics

View all reports →

Affected Software

clinical-genomics/scout

Vulnerable Versions:

unspecified

Timeline

Official Publish: May 5th, 2022

Last Modified: August 3rd, 2024

Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L

Weaknesses (CWE)

CWE-918

MITRE ATT&CK TTPs

T1190 Exploit Public-Facing Application

Initial Access

T1213 Data from Information Repositories

Collection

T1005 Data from Local System