CVE-2022-22993 — Limited Server-Side Request Forgery vulnerability on Western Digital My Cloud devices.
A limited SSRF vulnerability was discovered on Western Digital My Cloud devices that could allow an attacker to impersonate a server and reach any page on the server by bypassin…
Published: 2022-01-28 · CVSS: 7.8 · CVSS 3.1
A limited SSRF vulnerability was discovered on Western Digital My Cloud devices that could allow an attacker to impersonate a server and reach any page on the server by bypassing access controls. The vulnerability was addressed by creating a whitelist for valid parameters.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7