CVE-2024-23500 WordPress Kadence Blocks plugin <= 3.2.19 - Server Side Request Forgery (SSRF) vulnerability

Server-Side Request Forgery SSRF vulnerability in StellarWP Gutenberg Blocks by Kadence Blocks kadence-blocks.This issue affects Gutenberg Blocks by Kadence Blocks: from n/a through = 3.2.19...

CVE-2024-23500 WordPress Kadence Blocks plugin <= 3.2.19 - Server Side Request Forgery (SSRF) vulnerability

Server-Side Request Forgery SSRF vulnerability in StellarWP Gutenberg Blocks by Kadence Blocks kadence-blocks.This issue affects Gutenberg Blocks by Kadence Blocks: from n/a through = 3.2.19...

CVE-2024-0677

The Pz-LinkCard WordPress plugin through 2.5.1 does not prevent users from pinging arbitrary hosts via some of its shortcodes, which could allow high privilege users such as contributors to perform SSRF attacks...

CVE-2024-29090 WordPress AI Engine plugin <= 2.1.4 - Server Side Request Forgery (SSRF) vulnerability

Server-Side Request Forgery SSRF vulnerability in Jordy Meow AI Engine: ChatGPT Chatbot.This issue affects AI Engine: ChatGPT Chatbot: from n/a through 2.1.4...

CVE-2024-29090

CVE-2024-29090 concerns the WordPress AI Engine: ChatGPT Chatbot plugin, affected up to version 2.1.4. The vulnerability is a Server-Side Request Forgery (SSRF) in the download_image function, allowing an authenticated attacker (editor-level access or above) to cause the plugin to issue requests ...

CVE-2024-0677 Pz-LinkCard <= 2.5.1 - Contributor+ SSRF

The Pz-LinkCard WordPress plugin through 2.5.1 does not prevent users from pinging arbitrary hosts via some of its shortcodes, which could allow high privilege users such as contributors to perform SSRF attacks...

CVE-2024-0677 Pz-LinkCard <= 2.5.1 - Contributor+ SSRF

The Pz-LinkCard WordPress plugin through 2.5.1 does not prevent users from pinging arbitrary hosts via some of its shortcodes, which could allow high privilege users such as contributors to perform SSRF attacks...

CVE-2024-0677

CVE-2024-0677 is a confirmed SSRF vulnerability in the Pz-LinkCard WordPress plugin (versions ≤ 2.5.1). The flaw allows high-privilege users (e.g., Contributors) to ping arbitrary external hosts via certain shortcodes, enabling SSRF. Red Hat and Patchstack entries corroborate the issue and note a...

WordPress Brave Popup Builder Plugin <= 0.6.5 is vulnerable to Server Side Request Forgery (SSRF)

Software Brave Popup Builder Type Plugin Vulnerable versions = 0.6.5 Fixed in 0.6.6 OWASP Top 10 A10: Server-Side Request Forgery SSRF Classification Server Side Request Forgery SSRF CVE CVE-2024-30453 Patch priority Medium CVSS severity Medium 5.4 Developer Claim ownership PSID 8769cfe45747...

Server Side Request Forgery (SSRF)

mobsfscan is vulnerable to Server Side Request Forgery. The vulnerability due to inadequate input validation when extracting the android:host hostname attribute within the AndroidManifest.xml file, allowing attackers to manipulate requests and potentially make connections to internal-only service...

GHSA-R364-M2J9-MF4H gradio Server-Side Request Forgery vulnerability

An SSRF vulnerability exists in the gradio-app/gradio due to insufficient validation of user-supplied URLs in the /proxy route. Attackers can exploit this vulnerability by manipulating the self.replicaurls set through the X-Direct-Url header in requests to the / and /config routes, allowing the...

CVE-2024-2206

An SSRF vulnerability exists in the gradio-app/gradio due to insufficient validation of user-supplied URLs in the /proxy route. Attackers can exploit this vulnerability by manipulating the self.replicaurls set through the X-Direct-Url header in requests to the / and /config routes, allowing the...

CVE-2024-2206 SSRF Vulnerability in gradio-app/gradio

An SSRF vulnerability exists in the gradio-app/gradio due to insufficient validation of user-supplied URLs in the /proxy route. Attackers can exploit this vulnerability by manipulating the self.replicaurls set through the X-Direct-Url header in requests to the / and /config routes, allowing the...

CVE-2024-2206 SSRF Vulnerability in gradio-app/gradio

An SSRF vulnerability exists in the gradio-app/gradio due to insufficient validation of user-supplied URLs in the /proxy route. Attackers can exploit this vulnerability by manipulating the self.replicaurls set through the X-Direct-Url header in requests to the / and /config routes, allowing the...

WordPress AI Engine: ChatGPT Chatbot Plugin <= 2.1.4 is vulnerable to Server Side Request Forgery (SSRF)

Software AI Engine: ChatGPT Chatbot Type Plugin Vulnerable versions = 2.1.4 Fixed in 2.1.5 OWASP Top 10 A1: Broken Access Control Classification Server Side Request Forgery SSRF CVE CVE-2024-29090 Patch priority Low CVSS severity Low 6.8 Developer Claim ownership PSID 89edf8001a9b Credits Rafie...

CVE-2024-28435

The CRM platform Twenty version 0.3.0 is vulnerable to SSRF via file upload...

openSUSE Security Advisory (SUSE-SU-2024:0852-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2024-28435

The CRM platform Twenty version 0.3.0 is vulnerable to SSRF via file upload...

CVE-2024-28435

Twenty CRM platform version 0.3.0 is affected by a server-side request forgery (SSRF) via the file upload feature. The root cause is SSRF in the file upload handling, which can allow an attacker to trigger requests to internal resources or make unauthorized requests. PT-Security notes remediation...

CVE-2024-28435

The CRM platform Twenty version 0.3.0 is vulnerable to SSRF via file upload...