Lucene search
PRIOn knowledge basePRION:CVE-2022-2352HistorySep 26, 2022 - 1:15 p.m.
Server side request forgery (ssrf)
2022-09-2613:15:00
PRIOn knowledge base
www.prio-n.com
4
server side request forgery
ssrf
ajax actions
high privilege users
admin
blind ssrf
multisite installations
wordpress plugin
0.001 Low
EPSS
Percentile
43.1%
The Post SMTP Mailer/Email Log WordPress plugin before 2.1.7 does not have proper authorisation in some AJAX actions, which could allow high privilege users such as admin to perform blind SSRF on multisite installations for example.
Related
cvelist
cvelist
CVE-2022-2352 Post SMTP < 2.1.7 - Admin+ Blind SSRF
2022-09-26 12:35:32
patchstack
patchstack
wpvulndb
wpvulndb
Post SMTP < 2.1.7 - Admin+ Blind SSRF
2022-09-05 00:00:00
nvd
nvd
CVE-2022-2352
2022-09-26 13:15:10
openvas
openvas
WordPress Post SMTP Mailer/Email Log Plugin < 2.1.7 SSRF Vulnerability
2022-10-04 00:00:00
cve
cve
CVE-2022-2352
2022-09-26 13:15:10
cnvd
cnvd
WordPress Post SMTP Mailer/Email Log server request forgery vulnerability
2022-09-28 00:00:00
wpexploit
wpexploit
Post SMTP < 2.1.7 - Admin+ Blind SSRF
2022-09-05 00:00:00