CVE-2022-4725
1 advisory.
Maven/com.amazonaws:aws-android-sdk-mobile-client CVE-2022-4725: critical 9.8
AWS SDK is vulnerable to server-side request forgery (SSRF)
Action: Upgrade com.amazonaws:aws-android-sdk-mobile-client to 2.59.1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.59.1 | - |
Fixed versions
| 2.59.1 |
Sources
- osv: GHSA-f5h9-qx38-2hgp
- https://nvd.nist.gov/vuln/detail/CVE-2022-4725
- https://github.com/aws-amplify/aws-sdk-android/pull/3100
- https://github.com/aws-amplify/aws-sdk-android/commit/c3e6d69422e1f0c80fe53f2d757b8df97619af2b
- https://github.com/aws-amplify/aws-sdk-android
- https://github.com/aws-amplify/aws-sdk-android/releases/tag/release_v2.59.1
- https://vuldb.com/?id.216737
CVE-2022-4725 · published · modified · JSON