Server-Side Request Forgery in Gibbon by Amro
CVE-2022-27311

9.8CRITICAL

Key Information:

Vendor: Gibbon Project
Status: Gibbon
Vendor: CVE Published:; 25 April 2022

🔔 Create Gibbon Project Vulnerability Alert

What is CVE-2022-27311?

Gibbon versions 3.4.4 and below are susceptible to a Server-Side Request Forgery (SSRF) vulnerability, which can be exploited by attackers through specially crafted URLs. This vulnerability can enable malicious actors to trigger requests to internal services within the server, potentially leading to information disclosure or further exploitation. Users of affected versions are advised to upgrade to the latest patched versions to mitigate these risks.