Auto Generated CVE annotations [Tue Oct 11 10:39:10 UTC 2022] 🤖

cves/2022/CVE-2022-40083.yaml

@@ -3,14 +3,14 @@ id: CVE-2022-40083
 info:
   name: Labstack Echo < v4.9.0 - Open Redirect
   author: pdteam
-  severity: medium
+  severity: critical
   description: |
     Labstack Echo v4.8.0 was discovered to contain an open redirect vulnerability via the Static Handler component. This vulnerability can be leveraged by attackers to cause a Server-Side Request Forgery (SSRF).
   reference:
     - https://github.com/labstack/echo/issues/2259
   classification:
-    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
-    cvss-score: 6.1
+    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
+    cvss-score: 9.6
     cve-id: CVE-2022-40083
     cwe-id: CWE-601
   tags: cve,cve2022,redirect,labstack