Security Advisory

CVE-2022-38187

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2022-08-15 21:00:16

Last updated 2025-04-10 14:57:44

Assigner Esri

CVSS score 7.5

State PUBLISHED

Description

Prior to version 10.9.0, the sharing/rest/content/features/analyze endpoint is always accessible to anonymous users, which could allow an unauthenticated attacker to induce Esri Portal for ArcGIS to read arbitrary URLs.

← Browse all CVEs View on cve.org ↗