{"id":"CVE-2022-1592","aliases":["GHSA-g53g-q539-93cv","PYSEC-2026-750"],"title":"Server-Side Request Forgery in scout-browser","summary":"Server-Side Request Forgery in scout-browser","severity":"high","cvss":8.2,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N","vendor":"scout-browser","product":"scout-browser","ecosystem":"pip","affected":["scout-browser < 4.52"],"patched":["scout-browser 4.52"],"published":"2022-05-06","updated":"2026-07-06","source":"OSV","sourceUrl":"https://osv.dev/vulnerability/GHSA-g53g-q539-93cv","references":[{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-1592"},{"url":"https://github.com/Clinical-Genomics/scout/issues/3325"},{"url":"https://github.com/Clinical-Genomics/scout/pull/3326"},{"url":"https://github.com/clinical-genomics/scout/commit/b0ef15f4737d0c801154c1991b52ff5cab4f5c83"},{"url":"https://github.com/clinical-genomics/scout"},{"url":"https://huntr.dev/bounties/352b39da-0f2e-415a-9793-5480cae8bd27"}],"tags":["osv","pip","exploit-available"],"epss":0.01168,"epssPercentile":0.65989,"ingestedAt":"2026-07-08T18:25:49.229Z","exploits":{"github":1,"githubRepos":["https://github.com/AdnanApriliyansyahh/CVE-2022-1592"],"checkedAt":"2026-09-23T07:13:22.242Z"},"exploitAvailable":true,"slug":"CVE-2022-1592","body":"## Overview\n\nPypi package scout-browser (GitHub repository clinical-genomics/scout) prior to v4.52 is vulnerable to server-side request forgery. An attacker could make the application perform arbitrary requests to steal cookies, request access to private areas, or lead to cross-site scripting.\n\n## Affected packages\n\n- `scout-browser < 4.52`\n\n## Remediation\n\nUpgrade to a patched release:\n\n- `scout-browser 4.52`","depth":"midnight","depthScore":57,"depthScoreParts":{"impact":45.1,"likelihood":0.2,"exploitation":12,"ransomware":0},"changes":[{"seq":4584,"id":"CVE-2022-1592","ts":1788887192929,"field":"exploit_available","old":"false","new":"true"},{"seq":3467,"id":"CVE-2022-1592","ts":1788886309342,"field":"exploit_available","old":"true","new":"false"},{"seq":2321,"id":"CVE-2022-1592","ts":1788882978971,"field":"exploit_available","old":"false","new":"true"},{"seq":1350,"id":"CVE-2022-1592","ts":1788882391468,"field":"exploit_available","old":"true","new":"false"},{"seq":464,"id":"CVE-2022-1592","ts":1788881827014,"field":"exploit_available","old":"false","new":"true"}]}