Lucene search
HistoryMay 17, 2024 - 10:15 a.m.
CVE-2024-32830
cve-2024-32830
server side request forgery
buddyforms 2.8.8
CVSS3
8.6
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
AI Score
8.6
Confidence
High
EPSS
0
Percentile
10.5%
Improper Limitation of a Pathname to a Restricted Directory (‘Path Traversal’) vulnerability in ThemeKraft BuddyForms allows Server Side Request Forgery, Relative Path Traversal.This issue affects BuddyForms: from n/a through 2.8.8.
Related
vulnrichment
vulnrichment
wpvulndb
wpvulndb
cvelist
cvelist
cve
cve
CVE-2024-32830
2024-05-17 10:15:11
wordfence
wordfence
CVSS3
8.6
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
AI Score
8.6
Confidence
High
EPSS
0
Percentile
10.5%
Related for NVD:CVE-2024-32830