CVE-2022-4130

A blind site-to-site request forgery vulnerability was found in Satellite server. It is possible to trigger an external interaction to an attacker's server by modifying the Referer header in an HTTP request of specific resources in the server.

• https://bugzilla.redhat.com/show_bug.cgi?id=2145254Issue Tracking, Permissions Required, Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=2145254Issue Tracking, Permissions Required, Vendor Advisory

Published

Dec 16, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-41290IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privil…8.4
• CVE-2022-41291IBM InfoSphere Information Server 11.7 does not invalidate s…6.5
• CVE-2022-41294IBM Robotic Process Automation 21.0.0, 21.0.1, 21.0.2, 21.0.…6.5
• CVE-2022-41296IBM Db2U 3.5, 4.0, and 4.5 is vulnerable to cross-site reque…8.8
• CVE-2022-41297IBM Db2U 3.5, 4.0, and 4.5 is vulnerable to cross-site reque…6.5
• CVE-2022-41299IBM Cloud Transformation Advisor 2.0.1 through 3.3.1 is vuln…5.4
• CVE-2022-41301A maliciously crafted PKT file when consumed through Subasse…7.8
• CVE-2022-41302An Out-Of-Bounds Read Vulnerability in Autodesk FBX SDK vers…7.8
• CVE-2022-41303A user may be tricked into opening a malicious FBX file whic…7.8
• CVE-2022-41304An Out-Of-Bounds Write Vulnerability in Autodesk FBX SDK 202…7.8
• CVE-2022-41305A maliciously crafted PKT file when consumed through Subasse…7.8
• CVE-2022-41306A maliciously crafted PCT file when consumed through DesignR…7.8