CVE-2022-45835

MEDIUM EXPLOITED NUCLEI

Phonepe < 1.0.15 - SSRF

Title source: rule

Description

Server-Side Request Forgery (SSRF) vulnerability in PhonePe PhonePe Payment Solutions.This issue affects PhonePe Payment Solutions: from n/a through 1.0.15.

Nuclei Templates (1)

WordPress PhonePe Payment Solutions <=1.0.15 - Server-Side Request Forgery

HIGHVERIFIEDby theamanrawat

References (1)

[Third Party Advisory] https://patchstack.com/database/vulnerability/phonepe-payment-solutions/wordpress-phonepe-payment-solutions-plugin-1-0-15-server-side-request-forgery-ssrf?_s_id=cve

Scores

CVSS v3 5.8

EPSS 0.7108

EPSS Percentile 98.7%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N

Details

VulnCheck KEV 2024-12-05

CWE

CWE-918

Status published

Products (1)

phonepe/phonepe < 1.0.15

Published Nov 13, 2023

Tracked Since Feb 18, 2026