CVSS 3.1
8.2 highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:NCVE-2022-1592
High (8.2) in clinical-genomics scout. EPSS 1.3% chance of exploitation in the next 30 days. Fixed in scout-browser 4.52.
Server-Side Request Forgery in scout in GitHub repository clinical-genomics/scout prior to v4.42. An attacker could make the application perform arbitrary requests to fishing steal cookie, request to private area, or lead to xss...
Severity
- EPSS
- 1.3% chance of exploitation in the next 30 days; higher than 71% of CVEs (scores of 2026-10-31)
- CWE
- CWE-918
- Published
- Modified
- Record from
- the NVD, synced
Affected
- clinical-genomics:scout
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-g53g-q539-93cv | PyPI | scout-browser | <4.52 | 4.52 |
| PYSEC-2026-750 | PyPI | scout-browser | <4.52 | 4.52 |
References
- https://github.com/clinical-genomics/scout/commit/b0ef15f4737d0c801154c1991b52ff5cab4f5c83
- https://huntr.dev/bounties/352b39da-0f2e-415a-9793-5480cae8bd27
- https://github.com/clinical-genomics/scout/commit/b0ef15f4737d0c801154c1991b52ff5cab4f5c83
- https://huntr.dev/bounties/352b39da-0f2e-415a-9793-5480cae8bd27