CVE-2022-47872

maccms10 2021.1000.2000 is vulnerable to Server-side request forgery (SSRF).

8.8 HighPublic exploit

CVE-2022-47872 is a high vulnerability (CVSS 8.8) in Maccms, published February 1, 2023. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 0.88%, the 59th percentile. No source names a fixed version.

What does this mean?

Severity: 8.8 HighCVSS 3.1, NVD
Exploit chance: 0.88%EPSS, 59th percentile
Exploitation: None known1 public exploit
Fixed in: No fix listedNo source names one

Description

A Server-Side Request Forgery (SSRF) in maccms10 v2021.1000.2000 allows attackers to force the application to make arbitrary requests via a crafted payload injected into the Name parameter under the Interface address module.

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: Low
Privileges needed: Low
User interaction: None

What an attacker can affect

Confidentiality: High
Integrity: High
Availability: High

Exploit likelihood

0.88%Unchanged since Feb 2, 2023

Affected products

maccms

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
PoC in GitHub	Cedric1314/CVE-2022-47872	2023-02-01

What each source reports

NVD Score used8.8

Record: CVE-2022-47872
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-918
Updated: 2026-11-02

CVE ListNo score

Record: CVE-2022-47872
Updated: 2026-11-02

EUVDEUVD-2022-50629No score

Record: EUVD-2022-50629
Updated: 2026-11-03

GitHub AdvisoriesGHSA-cg8w-gw69-jwcj8.8

maccms10 2021.1000.2000 is vulnerable to Server-side request forgery (SSRF).