Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-8wvj-4mr8-vx3q

Опубликовано: 30 мая 2023
Источник: github
Github: Не прошло ревью
CVSS3: 8.8

Описание

The WP Fastest Cache WordPress plugin before 1.1.5 does not have CSRF check in an AJAX action, and does not validate user input before using it in the wp_remote_get() function, leading to a Blind SSRF issue

The WP Fastest Cache WordPress plugin before 1.1.5 does not have CSRF check in an AJAX action, and does not validate user input before using it in the wp_remote_get() function, leading to a Blind SSRF issue

EPSS

Процентиль: 91%
0.07128
Низкий

8.8 High

CVSS3

Дефекты

CWE-352

Связанные уязвимости

CVSS3: 8.8
nvd
больше 2 лет назад

The WP Fastest Cache WordPress plugin before 1.1.5 does not have CSRF check in an AJAX action, and does not validate user input before using it in the wp_remote_get() function, leading to a Blind SSRF issue

EPSS

Процентиль: 91%
0.07128
Низкий

8.8 High

CVSS3

Дефекты

CWE-352