References https://nvd.nist.gov/vuln/detail/CVE-2022-34538 https://nvd.nist.gov/vuln/detail/CVE-2022-34539 https://nvd.nist.gov/vuln/detail/CVE-2022-34540 https://github.com/advisories/GHSA-476m-73jc-7mhv https://github.com/advisories/GHSA-9vwq-9f96-jpj4 https://app.opencve.io/cve/?vendor=dw https://www.cvedetails.com/cve/CVE-2022-34538/ https://www.tenable.com/cve/CVE-2022-34538 https://strobes.co/vi/cve/CVE-2022-34539/ https://advisories.checkpoint.com/defense/advisories/public/2024/cpai-2022-2062.html/ https://fortiguard.fortinet.com/encyclopedia/ips/52325 https://fortiguard.fortinet.com/encyclopedia/ips/55251 https://threatcodex.com/index.php?search=CVE-2022-34538 https://www.appsecure.security/vulnerability-database/cve-2022-34538/
Related VulnerabilitiesPoCibm-websphere-ssrf: IBM WebSphere HCL Digital Experience - Server-Side Request ForgeryPoCCVE-2020-36884: BrightSign Digital Signage 8.2.26 - Server-Side Request ForgeryBrightSign Digital Signage /speedtest SSRF 漏洞PoCCVE-2024-5057: WordPress Easy Digital Downloads <= 3.2.12 - SQL InjectionPoCCVE-2023-30869: Easy Digital Downloads - Privilege Escalationwestern-digital-mycloud-multi-uploadify-file-upload: Western Digital MyCloud Multi Uploadify File UploadPoCCVE-2010-2307: Motorola SBV6120E SURFboard Digital Voice Modem SBV6X2X-1.0.0.5-SCM - Directory TraversalPoCCVE-2016-10108: Western Digital MyCloud NAS - Command InjectionPoCCVE-2018-17153: Western Digital MyCloud NAS - Authentication BypassPoCCVE-2021-27748: IBM WebSphere HCL Digital Experience - Server-Side Request ForgeryPoCCVE-2022-34534: Digital Watchdog DW Spectrum Server 4.2.0.32842 - Information DisclosurePoCCVE-2023-23489: WordPress Easy Digital Downloads 3.1.0.2/3.1.0.3 - SQL InjectionPoCdahua-dss-login-action-rce: 大华DSS Digital Surveillance System系统login_login.action存在远程命令执行漏洞