CVE-2023-46641

2023-12-0711:15:08

CWE-918

[email protected]

web.nvd.nist.gov

server-side request forgery

code for recovery

vulnerability

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

EPSS

Percentile

14.0%

JSON

Server-Side Request Forgery (SSRF) vulnerability in Code for Recovery 12 Step Meeting List.This issue affects 12 Step Meeting List: from n/a through 3.14.24.

Affected configurations

Nvd

Node

code4recovery12_step_meeting_listRange<3.14.25wordpress

VendorProductVersionCPE
code4recovery12_step_meeting_list*cpe:2.3:a:code4recovery:12_step_meeting_list:*:*:*:*:*:wordpress:*:*

Vendor	Product	Version	CPE
code4recovery	12_step_meeting_list	*	cpe:2.3:a:code4recovery:12_step_meeting_list::::::wordpress::*

References

patchstack.com/database/vulnerability/12-step-meeting-list/wordpress-12-step-meeting-list-plugin-3-14-24-server-side-request-forgery-ssrf-vulnerability?_s_id=cve