CVE-2024-38728

2024-07-2211:15:03

CWE-918

[email protected]

web.nvd.nist.gov

cve-2024-38728

seraphinite solutions

ssrf vulnerability

CVSS3

6.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

EPSS

Percentile

14.6%

JSON

Server-Side Request Forgery (SSRF) vulnerability in Seraphinite Solutions Seraphinite Post .DOCX Source.This issue affects Seraphinite Post .DOCX Source: from n/a through 2.16.9.

Affected configurations

Nvd

Node

s-solsseraphinite_post_.docx_sourceRange<2.16.10wordpress

VendorProductVersionCPE
s-solsseraphinite_post_.docx_source*cpe:2.3:a:s-sols:seraphinite_post_.docx_source:*:*:*:*:*:wordpress:*:*

Vendor	Product	Version	CPE
s-sols	seraphinite_post_.docx_source	*	cpe:2.3:a:s-sols:seraphinite_post_.docx_source::::::wordpress::*

References

patchstack.com/database/vulnerability/seraphinite-post-docx-source/wordpress-seraphinite-post-docx-source-plugin-2-16-9-server-side-request-forgery-ssrf-vulnerability?_s_id=cve