CVE-2022-25420

9.8 criticalEPSS 2.6%

Critical (9.8) in nttr goo blog. EPSS 2.6% chance of exploitation in the next 30 days.

NTT Resonant Incorporated goo blog App Web Application 1.0 is vulnerable to CLRF injection. This vulnerability allows attackers to execute arbitrary code via a crafted HTTP request.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 2.6% chance of exploitation in the next 30 days; higher than 85% of CVEs (scores of 2026-10-31)
CWE: CWE-74
Published: 2022-03-29
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

nttr:goo_blog

References

https://github.com/abhiunix/goo-blog-App-CVE
https://github.com/abhiunix/goo-blog-App-CVE

Check your stack JSON