CVE-2022-31188: Server-Side Request Forgery Vulnerability in Computer Vision Annotation Tool (CVAT)
CVAT is an opensource interactive video and image annotation tool for computer vision. Versions prior to 2.0.0 were found to be subject to a Server-side request forgery (SSRF) vulnerability. Validation has been added to urls used in the affected code path in version 2.0.0. Users are advised to upgrade. There are no known workarounds for this issue.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2022-31188?
CVE-2022-31188 is classified as a high severity vulnerability due to its potential for remote exploitation.
How do I fix CVE-2022-31188?
To fix CVE-2022-31188, upgrade CVAT to version 2.0.0 or later, which includes validation for URLs used in the affected code.
What type of vulnerability is CVE-2022-31188?
CVE-2022-31188 is a server-side request forgery (SSRF) vulnerability.
Which versions of CVAT are affected by CVE-2022-31188?
Versions of CVAT prior to 2.0.0 are affected by CVE-2022-31188.
What impact does CVE-2022-31188 have on users?
CVE-2022-31188 could allow an attacker to send unauthorized requests from the server, potentially leading to data exposure.