PT-2020-17076
CVE-2020-28978
·
تاريخ النشر
2020-11-30
·
تاريخ التحديث
2022-01-04
الوصف من
CVSS 3.1
5.3
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Canto plugin version 1.3.0 for WordPress
Description
The issue allows an unauthenticated attacker to make a request to any internal and external server via the /includes/lib/tree.php endpoint with the
subdomain variable set to SSRF. This enables blind Server-Side Request Forgery (SSRF) attacks.Recommendations
For Canto plugin version 1.3.0, consider disabling the /includes/lib/tree.php endpoint or restricting access to it until a patch is available. Avoid using the
subdomain variable in the affected endpoint to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.قابلية الاستغلال
استغلال
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾