Vulnerability record · CVE-2022-28090 · published 4 May 2022

CVE-2022-28090: Ujcms jspxcms server-side request forgery (ssrf) vulnerability

UUjcms · Jspxcms

Jspxcms v10.2.0 allows attackers to execute a Server-Side Request Forgery (SSRF) via /cmscp/ext/collect/fetch_url.do?url=.

6.5 CVSS 3.1 Medium EPSS 1.1% · top 36.6% CWE-918 · Server-side request forgery (SSRF)

6.5CVSS 3.1 base score, v2 6.4

1.1%EPSS exploitation probability, 30 days

NoNot in CISA KEV

1Affected product versions listed by NVD

2References, 2 tagged exploit

17 Jun 2026Last modified by NVD

Description

Jspxcms v10.2.0 allows attackers to execute a Server-Side Request Forgery (SSRF) via /cmscp/ext/collect/fetch_url.do?url=.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

UJspxcms Ujcms

References

Link	Tags
https://gitee.com/jspxcms/Jspxcms/issues/I4ZKDR	ExploitIssue TrackingThird Party Advisory
https://gitee.com/jspxcms/Jspxcms/issues/I4ZKDR	ExploitIssue TrackingThird Party Advisory

Track CVE-2022-28090 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2022-23329Ujcms jspxcms unrestricted file upload vulnerabilityA vulnerability in ${"freemarker.template.utility.Execute"?new() of UJCMS Jspxcms v10.2.0 allows attackers to execute arbitrary commands via uploadin…EPSS 14%4 Feb 2022 6.1CVE-2024-1257Ujcms jspxcms cross-site scripting vulnerabilityA vulnerability was found in Jspxcms 10.2.0. It has been classified as problematic. Affected is an unknown function of the file /ext/collect/find_tex…EPSS 0.45%6 Feb 2024 5.4CVE-2024-0599Ujcms jspxcms cross-site scripting vulnerabilityA vulnerability was found in Jspxcms 10.2.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the f…EPSS 0.51%16 Jan 2024 5.1CVE-2025-25772Ujcms jspxcms cross-site request forgery vulnerabilityA Cross-Site Request Forgery (CSRF) in the component /back/UserController.java of Jspxcms v9.0 to v9.5 allows attackers to arbitrarily add Administra…EPSS 0.17%21 Feb 2025 4.3CVE-2024-1256Ujcms jspxcms cross-site scripting vulnerabilityA vulnerability was found in Jspxcms 10.2.0 and classified as problematic. This issue affects some unknown processing of the file /ext/collect/filter…EPSS 0.55%6 Feb 2024 10.0CVE-2026-83548SonicWall SMA1000 pre-auth SSRF via alternate access pathThe SMA1000 Appliance Work Place interface exposes an unintended alternate access path that allows server-side request forgery before authentication.…KEVEPSS 8.8%analysed1 Sep 2026 10.0CVE-2026-49869Kestra OSS auth bypass via path suffix match enables RCEKestra OSS AuthenticationFilter whitelists the public config endpoint using request.getPath().endsWith("/configs"), a suffix match instead of an exac…KEVEPSS 2.1%analysed26 Jun 2026 9.3CVE-2026-64849MLflow unauthenticated webhook test endpoint SSRF via redirectMLflow before 3.15.0 validates the webhook URL only on the original request, while the delivery code follows redirects and re-resolves the hostname w…KEVEPSS 9.8%analysed17 Aug 2026

Source: NIST National Vulnerability Database (record CVE-2022-28090), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.