VYPR
← All advisories
Medium severity4.3NVD Advisory· Published Sep 24, 2022· Updated Jun 17, 2026

CVE-2022-23464

CVE-2022-23464

Description

Nepxion Discovery is a solution for Spring Cloud. Discovery is vulnerable to a potential Server-Side Request Forgery (SSRF). RouterResourceImpl uses RestTemplate’s getForEntity to retrieve the contents of a URL containing user-controlled input, potentially resulting in Information Disclosure. There is no patch available for this issue at time of publication. There are no known workarounds.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
com.nepxion:discoveryMaven
<= 6.16.2—

Affected products

3
  • Nepxion/Discovery2 versions
    cpe:2.3:a:nepxion:discovery:*:*:*:*:*:spring_cloud:*:*+ 1 more
    • cpe:2.3:a:nepxion:discovery:*:*:*:*:*:spring_cloud:*:*range: <=6.16.2
    • (no CPE)range: 6.16.2
  • ghsa-coords
    pkg:maven/com.nepxion/discovery
    Range: <= 6.16.2

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.