Medium severity5.3NVD Advisory· Published Jul 20, 2022· Updated Jun 17, 2026
CVE-2022-32457
CVE-2022-32457
Description
Digiwin BPM has inadequate filtering for URL parameter. An unauthenticated remote attacker can perform Blind SSRF attack to discover internal network topology base on URL error response.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Range: unspecified
Patches
Vulnerability mechanics
References
2- www.chtsecurity.com/news/09757883-fea6-4aff-9e22-8ae8c4f8f7bbnvdThird Party Advisory
- www.twcert.org.tw/tw/cp-132-6287-20ef0-1.htmlnvdThird Party Advisory
News mentions
0No linked articles in our index yet.