Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-7jjg-gm2c-94v7

Опубликовано: 26 дек. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 4.7

Описание

The Broken Link Checker WordPress plugin before 2.4.2 does not validate a the link URLs before making a request to them, which could allow admin users to perform SSRF attack, for example on a multisite installation.

The Broken Link Checker WordPress plugin before 2.4.2 does not validate a the link URLs before making a request to them, which could allow admin users to perform SSRF attack, for example on a multisite installation.

EPSS

Процентиль: 16%
0.00051
Низкий

4.7 Medium

CVSS3

Дефекты

CWE-918

Связанные уязвимости

CVSS3: 4.7
nvd
около 1 года назад

The Broken Link Checker WordPress plugin before 2.4.2 does not validate a the link URLs before making a request to them, which could allow admin users to perform SSRF attack, for example on a multisite installation.

EPSS

Процентиль: 16%
0.00051
Низкий

4.7 Medium

CVSS3

Дефекты

CWE-918