Medium severity4.3NVD Advisory· Published Feb 16, 2023· Updated Jun 17, 2026

CVE-2022-27234

Description

Server-side request forgery in the CVAT software maintained by Intel(R) before version 2.0.1 may allow an authenticated user to potentially enable information disclosure via network access.

Affected products

Intel/Computer Vision Annotation Tool
cpe:2.3:a:intel:computer_vision_annotation_tool:*:*:*:*:*:*:*:*
Range: <2.0.1
Intel/CIP softwarecpe-rescue
Intel/CVATllm-create
Range: <2.0.1

Patches

Vulnerability mechanics

References

www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00762.htmlnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.280
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000