phor3nsic/CVE-2021-40822

PoC

PoC and Dockerized vulnerable lab for CVE-2021-40822 (SSRF in GeoServer)

view exploit source poc_in_githubauthor phor3nsicpublished 2022-05-17catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2021-40822US	high7.5	19.3% (97th)	Exploit	2022-05-02
GeoServer through 2.18.5 and 2.19.x through 2.19.2 allows SSRF via the option for setting a proxy host.

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.