CVE-2022-39039: Aenrich A+hrd

Critical severity, CVSS 9.8. EPSS: 1% chance of exploitation in the next 30 days.

aEnrich’s a+HRD has inadequate filtering for specific URL parameter. An unauthenticated remote attacker can exploit this vulnerability to send arbitrary HTTP(s) request to launch Server-Side Request Forgery (SSRF) attack, to perform arbitrary system command or disrupt service.

Affected products

• Aenrich A+hrd: version 6.8 only; version 7.0 only

Published 2023-01-03. Last modified 2026-06-17.