CVE-2022-0265

CRITICAL

GitHub hazelcast/hazelcast <5.1-BETA-1 - SSRF

Title source: llm

Description

Improper Restriction of XML External Entity Reference in GitHub repository hazelcast/hazelcast in 5.1-BETA-1.

Exploits (1)

nomisec WORKING POC 5 stars
by achuna33 · poc
https://github.com/achuna33/CVE-2022-0265

References (2)

Scores

CVSS v3 9.8
EPSS 0.0831
EPSS Percentile 92.3%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-611
Status published
Products (2)
com.hazelcast/hazelcast 5.1-beta1 - 5.1Maven
hazelcast/hazelcast 5.1 beta1
Published Mar 03, 2022
Tracked Since Feb 18, 2026