CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 7.5. Exploitation may require the attacker to be authenticated.
CVE
CVE-2022-38187
Severity
HIGH
CVSS
7.5
EPSS
0.60%
Original NVD Description
Prior to version 10.9.0, the sharing/rest/content/features/analyze endpoint is always accessible to anonymous users, which could allow an unauthenticated attacker to induce Esri Portal for ArcGIS to read arbitrary URLs.
Related CVEs
Other vulnerabilities affecting the same vendor(s)