Lucene search
HistoryNov 13, 2023 - 3:15 a.m.
CVE-2023-37978
ssrf
dimitar ivanov
http headers
vulnerability
versions
CVSS3
4.9
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
EPSS
0.001
Percentile
18.1%
Server-Side Request Forgery (SSRF) vulnerability in Dimitar Ivanov HTTP Headers.This issue affects HTTP Headers: from n/a through 1.18.11.
Affected configurations
Node
riversidehttp_headersRange≤1.18.11wordpress
| Vendor | Product | Version | CPE |
|---|---|---|---|
| riverside | http_headers | * | cpe:2.3:a:riverside:http_headers:*:*:*:*:*:wordpress:*:* |
Related
cve
cve
CVE-2023-37978
2023-11-13 03:15:08
vulnrichment
vulnrichment
prion
prion
Server side request forgery (ssrf)
2023-11-13 03:15:00
cvelist
cvelist
wordfence
wordfence
CVSS3
4.9
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
EPSS
0.001
Percentile
18.1%
Related for NVD:CVE-2023-37978