writeups.xyz / CVE-2022-25026 & CVE-2022-25027: Vulnerabilities in Rocket TRUfusion Enterprise

Submitter : c2a

Date: 4 January 2023

Bounty : undisclosed

Vulnerabilities :

• Authentication Bypass
• SSRF

Programs :

• Rocket Software

Authors :

• Tom Wedgbury

Link :
https://labs.nettitude.com/blog/cve-2022-25026-cve-2022-25027-vulnerabilities-in-rocket-trufusion-enterprise/