← All advisories

Critical severity9.8NVD Advisory· Published Apr 28, 2022· Updated Jun 17, 2026

CVE-2022-24449

CVE-2022-24449

Description

Solar appScreener through 3.10.4, when a valid license is not present, allows XXE and SSRF attacks via a crafted XML document.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

Solar/appScreenerdescription
Solar AppScreener/solarAPPscreenerllm-create
Range: <=3.10.4

Patches

Vulnerability mechanics

References

1

en.rt-solar.ru/products/solarAPPscreener/nvdProductVendor Advisory

News mentions

0

No linked articles in our index yet.