.. / CVE-2022-2756

Exploit for Kavita <0.5.4.1 - Server-Side Request Forgery (CVE-2022-2756)

Description:

Kavita before 0.5.4.1 is susceptible to server-side request forgery in GitHub repository kareadita/kavita. An attacker can possibly obtain sensitive information, modify data, and/or execute unauthorized administrative operations in the context of the affected site.

Nuclei Template

View the template here CVE-2022-2756.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2022/CVE-2022-2756.yaml
Copy

References:

https://github.com/kareadita/kavita
https://github.com/kareadita/kavita/commit/9c31f7e7c81b919923cb2e3857439ec0d16243e4
https://nvd.nist.gov/vuln/detail/CVE-2022-2756
https://huntr.dev/bounties/95e7c181-9d80-4428-aebf-687ac55a9216/