CVE-2022-1379

PoC —

CVSS 3.1

9.1 critical

EPSS

2%p74

Published

May 14, 2022 (May 14, 2022)

Modified

Jun 17, 2026

Description

URL Restriction Bypass in GitHub repository plantuml/plantuml prior to V1.2022.5. An attacker can abuse this to bypass URL restrictions that are imposed by the different security profiles and achieve server side request forgery (SSRF). This allows accessing restricted internal resources/servers or sending requests to third party servers.

Vendors: plantuml fedoraproject
Products: plantuml, fedora
Weakness: CWE-918
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (1.6%)

In the news0 stories

No ingested article mentions this CVE yet.