CVE-2022-45326

MEDIUM

Kwoksys Information Server < 2.9.5.SP31 - Authenticated XML External Entity Injection

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2022-45326. PoCs published by navsec.

AI-analyzed exploit summary The repository contains a functional exploit for CVE-2022-45326, an XXE vulnerability in KwokSys < v2.9.5.SP31, allowing authenticated users to read arbitrary files or conduct SSRF attacks via a crafted RSS feed. The exploit includes authentication, payload delivery via a local HTTP server, and file retrieval.

Description

An XML external entity (XXE) injection vulnerability in Kwoksys Kwok Information Server before v2.9.5.SP31 allows remote authenticated users to conduct server-side request forgery (SSRF) attacks.

Exploits (1)

github WORKING POC
by navsec · pythonpoc
https://github.com/navsec/CVEs/tree/main/CVE-2022-45326

The repository contains a functional exploit for CVE-2022-45326, an XXE vulnerability in KwokSys < v2.9.5.SP31, allowing authenticated users to read arbitrary files or conduct SSRF attacks via a crafted RSS feed. The exploit includes authentication, payload delivery via a local HTTP server, and file retrieval.

Classification
Working Poc 95%
Attack Type
Xxe
Complexity
Moderate
Reliability
Reliable
Target: KwokSys < v2.9.5.SP31
Auth required
Prerequisites: Authenticated user with RSS module access · Local HTTP server for payload delivery
devstral-2 · analyzed Feb 27, 2026 Full analysis →

References (2)

Core 2
Core References
Exploit, Patch, Third Party Advisory
https://www.navsec.net/2022/11/12/kwoksys-xxe.html

Scores

CVSS v3 4.9
EPSS 0.0114
EPSS Percentile 62.3%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-611
Status published
Products (2)
kwoksys/information_server 2.9.5 sp23 (5 CPE variants)
kwoksys/information_server < 2.9.5
Published Dec 06, 2022
Tracked Since Feb 18, 2026