Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2024-12121

Опубликовано: 19 дек. 2024
Источник: nvd
CVSS3: 5.4
EPSS Низкий

Описание

The Broken Link Checker | Finder plugin for WordPress is vulnerable to Blind Server-Side Request Forgery in all versions up to, and including, 2.5.0 via the 'moblc_check_link' function. This makes it possible for authenticated attackers, with Author-level access and above, to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services.

EPSS

Процентиль: 48%
0.00248
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-918

Связанные уязвимости

CVSS3: 5.4
github
около 1 года назад

The Broken Link Checker | Finder plugin for WordPress is vulnerable to Blind Server-Side Request Forgery in all versions up to, and including, 2.5.0 via the 'moblc_check_link' function. This makes it possible for authenticated attackers, with Author-level access and above, to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services.

EPSS

Процентиль: 48%
0.00248
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-918