Vulnerabilities > CVE-2022-45926 - Server-Side Request Forgery (SSRF) vulnerability in Opentext Extended ECM

CVSS 8.8 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

network

low complexity

opentext

CWE-918

NVD

Published: 2023-01-18

Updated: 2024-11-21

Summary

An issue was discovered in OpenText Content Suite Platform 22.1 (16.2.19.1803). The endpoint notify.localizeEmailTemplate allows a low-privilege user to evaluate webreports.

Vulnerable Configurations

Part	Description	Count
Application	Opentext Opentext Opentext Extended ECM 20.4 Opentext Opentext Extended ECM 21.1 Opentext Opentext Extended ECM 22.1 Opentext Opentext Extended ECM 22.3	4

Common Weakness Enumeration (CWE)

CWE-918 - Server-Side Request Forgery (SSRF)

References

http://packetstormsecurity.com/files/170615/OpenText-Extended-ECM-22.3-File-Deletion-LFI-Privilege-Escsalation.html
http://packetstormsecurity.com/files/170615/OpenText-Extended-ECM-22.3-File-Deletion-LFI-Privilege-Escsalation.html
http://seclists.org/fulldisclosure/2023/Jan/14
http://seclists.org/fulldisclosure/2023/Jan/14
https://sec-consult.com/vulnerability-lab/advisory/multiple-post-authentication-vulnerabilities-including-rce-opentexttm-extended-ecm/
https://sec-consult.com/vulnerability-lab/advisory/multiple-post-authentication-vulnerabilities-including-rce-opentexttm-extended-ecm/