nvd-json-data-feeds/CVE-2022/CVE-2022-342xx/CVE-2022-34269.json

{
  "id": "CVE-2022-34269",
  "sourceIdentifier": "cve@mitre.org",
  "published": "2024-02-29T01:35:13.213",
  "lastModified": "2024-02-29T13:49:47.277",
  "vulnStatus": "Awaiting Analysis",
  "descriptions": [
    {
      "lang": "en",
      "value": "An issue was discovered in RWS WorldServer before 11.7.3. An authenticated, remote attacker can perform a ws-legacy/load_dtd?system_id= blind SSRF attack to deploy JSP code to the Apache Axis service running on the localhost interface, leading to command execution."
    }
  ],
  "metrics": {},
  "references": [
    {
      "url": "https://www.rws.com/localization/products/trados-enterprise/worldserver/",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://www.triskelelabs.com/vulnerabilities-in-rws-worldserver",
      "source": "cve@mitre.org"
    }
  ]
}