writeups.xyz / Cisco BroadWorks CommPilot Application Software Unauthenticated Server-Side Request Forgery (CVE-2022-20951)

Submitter : c2a

Date: 21 December 2022

Bounty : undisclosed

Vulnerabilities :

• SSRF
• Security Code Review

Programs :

• Cisco

Authors :

• Smaury (@Smaury92)
• Andrea Cappa (@Zi0Black)
• Th3Zer0 (@Th3Zer0)

Link :
https://www.shielder.com/advisories/cisco-broadworks-commpilot-ssrf/