← All advisories

Critical severity9.8NVD Advisory· Published Feb 10, 2022· Updated Jun 17, 2026

CVE-2022-24568

CVE-2022-24568

Description

Novel-plus v3.6.0 was discovered to be vulnerable to Server-Side Request Forgery (SSRF) via user-supplied crafted input.

Affected products

2

Xxyopen/Novel Plus
cpe:2.3:a:xxyopen:novel-plus:3.6.0:*:*:*:*:*:*:*
Novel-plus/Novel-plusdescription

Patches

Vulnerability mechanics

References

1

github.com/201206030/novel-plus/issues/80nvdExploitIssue TrackingThird Party Advisory

News mentions

0

No linked articles in our index yet.