High severity8.6NVD Advisory· Published Aug 1, 2022· Updated Jun 17, 2026
CVE-2022-31188
CVE-2022-31188
Description
CVAT is an opensource interactive video and image annotation tool for computer vision. Versions prior to 2.0.0 were found to be subject to a Server-side request forgery (SSRF) vulnerability. Validation has been added to urls used in the affected code path in version 2.0.0. Users are advised to upgrade. There are no known workarounds for this issue.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- cpe:2.3:a:cvat:computer_vision_annotation_tool:*:*:*:*:*:*:*:*Range: <2.0.0
Patches
Vulnerability mechanics
References
3- github.com/cvat-ai/cvat/commit/6fad1764efd922d99dbcda28c4ee72d071aa5a07nvdPatchThird Party Advisory
- github.com/cvat-ai/cvat/security/advisories/GHSA-7vpj-j5xv-29prnvdPatchThird Party Advisory
- packetstormsecurity.com/files/169814/CVAT-2.0-Server-Side-Request-Forgery.htmlnvdExploitThird Party AdvisoryVDB Entry
News mentions
0No linked articles in our index yet.