Nepxion Discovery
2 CVEs affecting Nepxion Discovery. Latest disclosed: 2022-09-24. Critical: 1, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-23463 | Critical | 9.4 | 2022-09-24 | Nepxion Discovery is a solution for Spring Cloud. Discover is vulnerable to SpEL Injection in discovery-commons. DiscoveryExpressionResolver’s eval method is e… |
CVE-2022-23464 | Medium | 4.3 | 2022-09-24 | Nepxion Discovery is a solution for Spring Cloud. Discovery is vulnerable to a potential Server-Side Request Forgery (SSRF). RouterResourceImpl uses RestTempla… |