CVE-2022-38187 — Prevent access to sharing/rest/content/features/analyze to unauthorized users
Prior to version 10.9.0, the sharing/rest/content/features/analyze endpoint is always accessible to anonymous users, which could allow an unauthenticated attacker to induce Esri…
Published: 2022-08-15 · CVSS: 7.5 · CVSS 3.1
Prior to version 10.9.0, the sharing/rest/content/features/analyze endpoint is always accessible to anonymous users, which could allow an unauthenticated attacker to induce Esri Portal for ArcGIS to read arbitrary URLs.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7