Lucene search
PRIOn knowledge basePRION:CVE-2022-1398HistoryMay 16, 2022 - 3:15 p.m.
Server side request forgery (ssrf)
2022-05-1615:15:00
PRIOn knowledge base
www.prio-n.com
4
0.005 Low
EPSS
Percentile
76.4%
The External Media without Import WordPress plugin through 1.1.2 does not have any authorisation and does to ensure that medias added via URLs are external medias, which could allow any authenticated users, such as subscriber to perform blind SSRF attacks
| CPE | Name | Operator | Version |
|---|---|---|---|
| external_media_without_import | le | 1.1.2 |
Related
patchstack
patchstack
cnvd
cnvd
WordPress External Media without Imports plugin服务端请求伪造漏洞
2022-05-18 00:00:00
cvelist
cvelist
cve
cve
CVE-2022-1398
2022-05-16 15:15:09
nuclei
nuclei
nvd
nvd
CVE-2022-1398
2022-05-16 15:15:09