CVE-2022-4096
Published: 21 November 2022
Summary
CVE-2022-4096 is a medium-severity SSRF (CWE-918) vulnerability in Appsmith Appsmith. Its CVSS base score is 6.5 (Medium).
Operationally, ranked in the top 7.0% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.
Deeper analysis
CVE-2022-4096 is a server-side request forgery vulnerability affecting the Appsmith open-source low-code platform in the appsmithorg/appsmith repository prior to version 1.8.2. The flaw is classified under CWE-918 and carries a CVSS 3.1 base score of 6.5, reflecting network-accessible exploitation with low attack complexity and low-privileged authentication requirements that result in high confidentiality impact without affecting integrity or availability.
An authenticated attacker with low privileges can supply crafted requests that cause the Appsmith server to issue outbound requests to arbitrary internal or external resources, potentially disclosing sensitive data reachable from the server.
The referenced GitHub commit 769719ccfe667f059fe0b107a19ec9feb90f2e40 and the associated huntr.dev report document the remediation, which is included in the 1.8.2 release; organizations should apply the update to eliminate the SSRF vector.
EPSS for this CVE has remained flat at a peak and current value of 0.0944 with no material increase after disclosure.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2022-51466
Vulnerability details
Server-Side Request Forgery (SSRF) in GitHub repository appsmithorg/appsmith prior to 1.8.2.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
Likely Mitigating Controls AI
Per-CVE control mapping for this CVE has not run yet; the list below is derived from the weakness types (CWEs) cited in the NVD entry.
Penetration testing attempts server-side requests to internal resources, identifying SSRF weaknesses for remediation.
Outbound connections to external resources can be monitored and limited at the boundary, reducing SSRF impact.
Validates server-side URLs and resource references to block SSRF attempts.
Detects server-side request forgery through monitoring of unexpected outbound connections.