CVE-2022-1239

creationtimestamp| type| source ---|---|--- 2022-05-02 20:28:08+00:00| seen| https://t.me/cibsecurity/41740...

CVE-2022-1239

The HubSpot WordPress plugin before 8.8.15 does not validate the proxy URL given to the proxy REST endpoint, which could allow users with the editposts capability by default contributor and above to perform SSRF attacks...

CVE-2022-1239

CVE-2022-1239 concerns the WordPress HubSpot plugin prior to 8.8.15. The vulnerability stems from the proxy REST endpoint not validating the provided proxy URL, enabling an authenticated user with the edit_posts capability (default Contributor+) to perform server-side request forgery (SSRF). Affe...