CVE-2022-40083

PoC —

CVSS 3.1

9.6 critical

EPSS

3%p84

Published

Sep 28, 2022 (Sep 28, 2022)

Modified

Jun 17, 2026

Description

Labstack Echo v4.8.0 was discovered to contain an open redirect vulnerability via the Static Handler component. This vulnerability can be leveraged by attackers to cause a Server-Side Request Forgery (SSRF).

Vendors: labstack
Products: echo
Weakness: CWE-601
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (2.6%)

In the news0 stories

No ingested article mentions this CVE yet.