CVE-2022-23464: Nepxion Discovery

High severity, CVSS 7.5. EPSS: 0.7% chance of exploitation in the next 30 days.

Nepxion Discovery is a solution for Spring Cloud. Discovery is vulnerable to a potential Server-Side Request Forgery (SSRF). RouterResourceImpl uses RestTemplate’s getForEntity to retrieve the contents of a URL containing user-controlled input, potentially resulting in Information Disclosure. There is no patch available for this issue at time of publication. There are no known workarounds.

Affected products

• Nepxion Discovery: up to and including 6.16.2

Published 2022-09-24. Last modified 2026-06-17.