CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2022-1379

URL Restriction Bypass in GitHub repository plantuml/plantuml prior to V1.2022.5. An attacker can abuse this to bypass URL restrictions that are imposed by the different security profiles and achieve server side request forgery (SSRF). This allows accessing restricted internal resources/servers or sending requests to third party servers.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.003

EPSS Ranking 49.9%

CVSS Severity

CVSS v3 Score 7.2

CVSS v2 Score 6.4

References

Products affected by CVE-2022-1379

Plantuml » Plantuml » Version: 1.2017.12

cpe:2.3:a:plantuml:plantuml:1.2017.12
Plantuml » Plantuml » Version: 1.2017.13

cpe:2.3:a:plantuml:plantuml:1.2017.13
Plantuml » Plantuml » Version: 1.2017.14

cpe:2.3:a:plantuml:plantuml:1.2017.14
Plantuml » Plantuml » Version: 1.2017.15

cpe:2.3:a:plantuml:plantuml:1.2017.15
Plantuml » Plantuml » Version: 1.2017.17

cpe:2.3:a:plantuml:plantuml:1.2017.17
Plantuml » Plantuml » Version: 1.2017.18

cpe:2.3:a:plantuml:plantuml:1.2017.18
Plantuml » Plantuml » Version: 1.2017.19

cpe:2.3:a:plantuml:plantuml:1.2017.19
Plantuml » Plantuml » Version: 1.2017.20

cpe:2.3:a:plantuml:plantuml:1.2017.20
Plantuml » Plantuml » Version: 1.2018.0

cpe:2.3:a:plantuml:plantuml:1.2018.0
Plantuml » Plantuml » Version: 1.2018.1

cpe:2.3:a:plantuml:plantuml:1.2018.1
Plantuml » Plantuml » Version: 1.2018.10

cpe:2.3:a:plantuml:plantuml:1.2018.10
Plantuml » Plantuml » Version: 1.2018.11

cpe:2.3:a:plantuml:plantuml:1.2018.11
Plantuml » Plantuml » Version: 1.2018.12

cpe:2.3:a:plantuml:plantuml:1.2018.12
Plantuml » Plantuml » Version: 1.2018.13

cpe:2.3:a:plantuml:plantuml:1.2018.13
Plantuml » Plantuml » Version: 1.2018.14

cpe:2.3:a:plantuml:plantuml:1.2018.14
Plantuml » Plantuml » Version: 1.2018.2

cpe:2.3:a:plantuml:plantuml:1.2018.2
Plantuml » Plantuml » Version: 1.2018.3

cpe:2.3:a:plantuml:plantuml:1.2018.3
Plantuml » Plantuml » Version: 1.2018.4

cpe:2.3:a:plantuml:plantuml:1.2018.4
Plantuml » Plantuml » Version: 1.2018.5

cpe:2.3:a:plantuml:plantuml:1.2018.5
Plantuml » Plantuml » Version: 1.2018.6

cpe:2.3:a:plantuml:plantuml:1.2018.6
Plantuml » Plantuml » Version: 1.2018.7

cpe:2.3:a:plantuml:plantuml:1.2018.7
Plantuml » Plantuml » Version: 1.2018.8

cpe:2.3:a:plantuml:plantuml:1.2018.8
Plantuml » Plantuml » Version: 1.2018.9

cpe:2.3:a:plantuml:plantuml:1.2018.9
Plantuml » Plantuml » Version: 1.2019.0

cpe:2.3:a:plantuml:plantuml:1.2019.0
Plantuml » Plantuml » Version: 1.2019.1

cpe:2.3:a:plantuml:plantuml:1.2019.1
Plantuml » Plantuml » Version: 1.2019.10

cpe:2.3:a:plantuml:plantuml:1.2019.10
Plantuml » Plantuml » Version: 1.2019.11

cpe:2.3:a:plantuml:plantuml:1.2019.11
Plantuml » Plantuml » Version: 1.2019.12

cpe:2.3:a:plantuml:plantuml:1.2019.12
Plantuml » Plantuml » Version: 1.2019.13

cpe:2.3:a:plantuml:plantuml:1.2019.13
Plantuml » Plantuml » Version: 1.2019.2

cpe:2.3:a:plantuml:plantuml:1.2019.2
Plantuml » Plantuml » Version: 1.2019.4

cpe:2.3:a:plantuml:plantuml:1.2019.4
Plantuml » Plantuml » Version: 1.2019.5

cpe:2.3:a:plantuml:plantuml:1.2019.5
Plantuml » Plantuml » Version: 1.2019.6

cpe:2.3:a:plantuml:plantuml:1.2019.6
Plantuml » Plantuml » Version: 1.2019.7

cpe:2.3:a:plantuml:plantuml:1.2019.7
Plantuml » Plantuml » Version: 1.2019.8

cpe:2.3:a:plantuml:plantuml:1.2019.8
Plantuml » Plantuml » Version: 1.2019.9

cpe:2.3:a:plantuml:plantuml:1.2019.9
Plantuml » Plantuml » Version: 1.2020.0

cpe:2.3:a:plantuml:plantuml:1.2020.0
Plantuml » Plantuml » Version: 1.2020.1

cpe:2.3:a:plantuml:plantuml:1.2020.1
Plantuml » Plantuml » Version: 1.2020.10

cpe:2.3:a:plantuml:plantuml:1.2020.10
Plantuml » Plantuml » Version: 1.2020.11

cpe:2.3:a:plantuml:plantuml:1.2020.11
Plantuml » Plantuml » Version: 1.2020.12

cpe:2.3:a:plantuml:plantuml:1.2020.12
Plantuml » Plantuml » Version: 1.2020.13

cpe:2.3:a:plantuml:plantuml:1.2020.13
Plantuml » Plantuml » Version: 1.2020.14

cpe:2.3:a:plantuml:plantuml:1.2020.14
Plantuml » Plantuml » Version: 1.2020.15

cpe:2.3:a:plantuml:plantuml:1.2020.15
Plantuml » Plantuml » Version: 1.2020.16

cpe:2.3:a:plantuml:plantuml:1.2020.16
Plantuml » Plantuml » Version: 1.2020.17

cpe:2.3:a:plantuml:plantuml:1.2020.17
Plantuml » Plantuml » Version: 1.2020.18

cpe:2.3:a:plantuml:plantuml:1.2020.18
Plantuml » Plantuml » Version: 1.2020.19

cpe:2.3:a:plantuml:plantuml:1.2020.19
Plantuml » Plantuml » Version: 1.2020.2

cpe:2.3:a:plantuml:plantuml:1.2020.2
Plantuml » Plantuml » Version: 1.2020.20

cpe:2.3:a:plantuml:plantuml:1.2020.20
Plantuml » Plantuml » Version: 1.2020.21

cpe:2.3:a:plantuml:plantuml:1.2020.21
Plantuml » Plantuml » Version: 1.2020.22

cpe:2.3:a:plantuml:plantuml:1.2020.22
Plantuml » Plantuml » Version: 1.2020.23

cpe:2.3:a:plantuml:plantuml:1.2020.23
Plantuml » Plantuml » Version: 1.2020.24

cpe:2.3:a:plantuml:plantuml:1.2020.24
Plantuml » Plantuml » Version: 1.2020.26

cpe:2.3:a:plantuml:plantuml:1.2020.26
Plantuml » Plantuml » Version: 1.2020.3

cpe:2.3:a:plantuml:plantuml:1.2020.3
Plantuml » Plantuml » Version: 1.2020.4

cpe:2.3:a:plantuml:plantuml:1.2020.4
Plantuml » Plantuml » Version: 1.2020.6

cpe:2.3:a:plantuml:plantuml:1.2020.6
Plantuml » Plantuml » Version: 1.2020.7

cpe:2.3:a:plantuml:plantuml:1.2020.7
Plantuml » Plantuml » Version: 1.2020.8

cpe:2.3:a:plantuml:plantuml:1.2020.8
Plantuml » Plantuml » Version: 1.2020.9

cpe:2.3:a:plantuml:plantuml:1.2020.9
Plantuml » Plantuml » Version: 1.2021.0

cpe:2.3:a:plantuml:plantuml:1.2021.0
Plantuml » Plantuml » Version: 1.2021.1

cpe:2.3:a:plantuml:plantuml:1.2021.1
Plantuml » Plantuml » Version: 1.2021.10

cpe:2.3:a:plantuml:plantuml:1.2021.10
Plantuml » Plantuml » Version: 1.2021.12

cpe:2.3:a:plantuml:plantuml:1.2021.12
Plantuml » Plantuml » Version: 1.2021.13

cpe:2.3:a:plantuml:plantuml:1.2021.13
Plantuml » Plantuml » Version: 1.2021.14

cpe:2.3:a:plantuml:plantuml:1.2021.14
Plantuml » Plantuml » Version: 1.2021.15

cpe:2.3:a:plantuml:plantuml:1.2021.15
Plantuml » Plantuml » Version: 1.2021.16

cpe:2.3:a:plantuml:plantuml:1.2021.16
Plantuml » Plantuml » Version: 1.2021.2

cpe:2.3:a:plantuml:plantuml:1.2021.2
Plantuml » Plantuml » Version: 1.2021.3

cpe:2.3:a:plantuml:plantuml:1.2021.3
Plantuml » Plantuml » Version: 1.2021.4

cpe:2.3:a:plantuml:plantuml:1.2021.4
Plantuml » Plantuml » Version: 1.2021.5

cpe:2.3:a:plantuml:plantuml:1.2021.5
Plantuml » Plantuml » Version: 1.2021.6

cpe:2.3:a:plantuml:plantuml:1.2021.6
Plantuml » Plantuml » Version: 1.2021.7

cpe:2.3:a:plantuml:plantuml:1.2021.7
Plantuml » Plantuml » Version: 1.2021.8

cpe:2.3:a:plantuml:plantuml:1.2021.8
Plantuml » Plantuml » Version: 1.2021.9

cpe:2.3:a:plantuml:plantuml:1.2021.9
Plantuml » Plantuml » Version: 1.2022.0

cpe:2.3:a:plantuml:plantuml:1.2022.0
Plantuml » Plantuml » Version: 1.2022.1

cpe:2.3:a:plantuml:plantuml:1.2022.1
Plantuml » Plantuml » Version: 1.2022.2

cpe:2.3:a:plantuml:plantuml:1.2022.2
Plantuml » Plantuml » Version: 1.2022.3

cpe:2.3:a:plantuml:plantuml:1.2022.3
Plantuml » Plantuml » Version: 1.2022.4

cpe:2.3:a:plantuml:plantuml:1.2022.4
Fedoraproject » Fedora » Version: 35

cpe:2.3:o:fedoraproject:fedora:35
Fedoraproject » Fedora » Version: 36

cpe:2.3:o:fedoraproject:fedora:36

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2022-1379

Products

Pricing

Contact Us