Описание
The Import feature of the RSVPMaker WordPress plugin before 8.7.3 (/wp-admin/tools.php?page=rsvpmaker_export_screen) takes an URL input and calls curl on it, without first validating it to ensure it's a remote one. As a result, a high privilege user could use that feature to scan the internal network via a SSRF attack.
Ссылки
- ExploitPatchThird Party Advisory
- ExploitThird Party Advisory
- ExploitPatchThird Party Advisory
- ExploitThird Party Advisory
Уязвимые конфигурации
EPSS
2.7 Low
CVSS3
4 Medium
CVSS2
Дефекты
Связанные уязвимости
The Import feature of the RSVPMaker WordPress plugin before 8.7.3 (/wp-admin/tools.php?page=rsvpmaker_export_screen) takes an URL input and calls curl on it, without first validating it to ensure it's a remote one. As a result, a high privilege user could use that feature to scan the internal network via a SSRF attack.
Уязвимость реализации функции импорта (/wp-admin/tools.php?page=rsvpmaker_export_screen) плагина RSVPMaker системы управления содержимым сайта WordPress, позволяющая нарушителю осуществить SSRF-атаку
EPSS
2.7 Low
CVSS3
4 Medium
CVSS2