Lucene search
HistoryNov 13, 2023 - 3:15 a.m.
CVE-2023-37978
cve-2023-37978
server-side request forgery
ssrf
dimitar ivanov
http headers
security vulnerability
4.9 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
5.2 Medium
AI Score
Confidence
High
0.0005 Low
EPSS
Percentile
18.3%
Server-Side Request Forgery (SSRF) vulnerability in Dimitar Ivanov HTTP Headers.This issue affects HTTP Headers: from n/a through 1.18.11.
Affected configurations
Node
dimitar_ivanovhttp_headersRange≤1.18.11
| CPE | Name | Operator | Version |
|---|---|---|---|
| riverside:http_headers | riverside http headers | le | 1.18.11 |
CNA Affected
[
{
"collectionURL": "https://wordpress.org/plugins",
"defaultStatus": "unaffected",
"packageName": "http-headers",
"product": "HTTP Headers",
"vendor": "Dimitar Ivanov",
"versions": [
{
"changes": [
{
"at": "1.19.0",
"status": "unaffected"
}
],
"lessThanOrEqual": "1.18.11",
"status": "affected",
"version": "n/a",
"versionType": "custom"
}
]
}
]Related
cvelist
cvelist
prion
prion
Server side request forgery (ssrf)
2023-11-13 03:15:00
nvd
nvd
CVE-2023-37978
2023-11-13 03:15:08
wordfence
wordfence
4.9 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
5.2 Medium
AI Score
Confidence
High
0.0005 Low
EPSS
Percentile
18.3%
Related for CVE-2023-37978