Lucene search
WpvulndbWPVDB-ID:B28EF28A-8421-43EB-8F40-4644DF68209CHistoryOct 26, 2022 - 12:00 a.m.
Web Stories < 1.25.0 - Subscriber+ Server Side Request Forgery
2022-10-2600:00:00
wpscan.com
11
web stories
ssrf
vulnerability
server-side
software
0.001 Low
EPSS
Percentile
43.0%
The plugin does not validate the url parameter passed to the v1/hotlink/proxy REST endpoint, allowing any authenticated users to perform SSRF attacks
| CPE | Name | Operator | Version |
|---|---|---|---|
| web-stories | lt | 1.25.0 |
Related
cve
cve
CVE-2022-3708
2022-10-28 19:15:10
prion
prion
Server side request forgery (ssrf)
2022-10-28 19:15:00
nvd
nvd
CVE-2022-3708
2022-10-28 19:15:10
osv
osv
CVE-2022-3708
2022-10-28 19:15:10
patchstack
patchstack
cvelist
cvelist
CVE-2022-3708
2022-10-28 18:58:21
cnvd
cnvd
WordPress Web Stories plugin input validation error vulnerability
2022-10-31 00:00:00