Vulnerabilities > CVE-2022-39039 - Server-Side Request Forgery (SSRF) vulnerability in Aenrich A+Hrd 6.8/7.0
Attack vector
UNKNOWN Attack complexity
UNKNOWN Privileges required
UNKNOWN Confidentiality impact
UNKNOWN Integrity impact
UNKNOWN Availability impact
UNKNOWN Summary
aEnrich’s a+HRD has inadequate filtering for specific URL parameter. An unauthenticated remote attacker can exploit this vulnerability to send arbitrary HTTP(s) request to launch Server-Side Request Forgery (SSRF) attack, to perform arbitrary system command or disrupt service.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 2 |