CVE-2022-28090

MEDIUM

Ujcms Jspxcms - SSRF

Title source: rule

Jspxcms v10.2.0 allows attackers to execute a Server-Side Request Forgery (SSRF) via /cmscp/ext/collect/fetch_url.do?url=.

gitee 7 stars

by jspxcms · javawriteup

CVSS v3 6.5

EPSS 0.0100

EPSS Percentile 77.0%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

CWE

CWE-918

Status published

Products (1)

ujcms/jspxcms 10.2.0

Published May 04, 2022

Tracked Since Feb 18, 2026