CVE-2022-27311: Gibbon Project Gibbon

Critical severity, CVSS 9.8. EPSS: 1.6% chance of exploitation in the next 30 days.

Gibbon v3.4.4 and below allows attackers to execute a Server-Side Request Forgery (SSRF) via a crafted URL.

Affected products

• Gibbon Project Gibbon: before 3.4.4 (fixed in 3.4.4)

Published 2022-04-25. Last modified 2026-06-17.