CVE-2023-49746

2023-12-0711:15:08

CWE-918

[email protected]

web.nvd.nist.gov

cve-2023-49746

server-side request forgery

ssrf

softaculous team

speedycache

cache optimization

performance

nvd

4.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N

5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

14.0%

JSON

Server-Side Request Forgery (SSRF) vulnerability in Softaculous Team SpeedyCache – Cache, Optimization, Performance.This issue affects SpeedyCache – Cache, Optimization, Performance: from n/a through 1.1.2.

Affected configurations

Vulners

NVD

Node

softaculous_teamspeedycache_–_cache\,_optimization\,_performanceRange≤1.1.2

CPENameOperatorVersion
softaculous:speedycachesoftaculous speedycachelt1.1.3

CPE	Name	Operator	Version
softaculous:speedycache	softaculous speedycache	lt	1.1.3

CNA Affected

[
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "speedycache",
    "product": "SpeedyCache – Cache, Optimization, Performance",
    "vendor": "Softaculous Team",
    "versions": [
      {
        "changes": [
          {
            "at": "1.1.3",
            "status": "unaffected"
          }
        ],
        "lessThanOrEqual": "1.1.2",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  }
]