cve/2022/CVE-2022-36663.md

CVE-2022-36663

Description

Gluu Oxauth before v4.4.1 allows attackers to execute blind SSRF (Server-Side Request Forgery) attacks via a crafted request_uri parameter.

POC

Reference

No PoCs from references.

Github

• https://github.com/aqeisi/CVE-2022-36663-PoC
• https://github.com/k0mi-tg/CVE-POC
• https://github.com/manas3c/CVE-POC
• https://github.com/nomi-sec/PoC-in-GitHub
• https://github.com/whoforget/CVE-POC
• https://github.com/youwizard/CVE-POC