CVE-2024-33627

2024-04-2908:15:07

CWE-918

[email protected]

web.nvd.nist.gov

ssrf

cusmin absolutely glamorous

custom admin

vulnerability

4.4 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N

6.8 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.0%

JSON

Server-Side Request Forgery (SSRF) vulnerability in Cusmin Absolutely Glamorous Custom Admin.This issue affects Absolutely Glamorous Custom Admin: from n/a through 7.2.2.

Affected configurations

Vulners

Node

cusminabsolutely_glamorous_custom_adminRange≤7.2.2

VendorProductVersionCPE
cusminabsolutely_glamorous_custom_admin*cpe:2.3:a:cusmin:absolutely_glamorous_custom_admin:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cusmin	absolutely_glamorous_custom_admin	*	cpe:2.3:a:cusmin:absolutely_glamorous_custom_admin::::::::

CNA Affected

[
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "ag-custom-admin",
    "product": "Absolutely Glamorous Custom Admin",
    "vendor": "Cusmin",
    "versions": [
      {
        "lessThanOrEqual": "7.2.2",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  }
]

References

patchstack.com/database/vulnerability/ag-custom-admin/wordpress-agca-custom-dashboard-login-page-plugin-7-2-2-server-side-request-forgery-ssrf-vulnerability?_s_id=cve