Discovery vulnerabilities

2 known vulnerabilities in Discovery from Nepxion. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Discovery: Server-Side Request Forgery

  CVE-2022-23464Sep 24, 2022Nepxion

  Nepxion Discovery is a solution for Spring Cloud. Discovery is vulnerable to a potential Server-Side Request Forgery (SSRF). RouterResourceImpl uses RestTemplate’s getForEntity to retrieve the contents of a URL containing user-controlled input, potentially res

• 9.8 Critical severity

  Discover: Improper Neutralization of Special Elements used in an Expression Language Statement

  CVE-2022-23463Sep 24, 2022NepxionEPSS 2.26%

  Nepxion Discovery is a solution for Spring Cloud. Discover is vulnerable to SpEL Injection in discovery-commons. DiscoveryExpressionResolver’s eval method is evaluating expression with a StandardEvaluationContext, allowing the expression to reach and interact