CVE-2022-0591 - CERT CVE

  1. CVE-2022-0591

ID CVE-2022-0591
Sažetak The FormCraft WordPress plugin before 3.8.28 does not validate the URL parameter in the formcraft3_get AJAX action, leading to SSRF issues exploitable by unauthenticated users
Reference
CVSS
Base: 6.4
Impact: 4.9
Exploitability:10.0
Pristup
VektorSloženostAutentikacija
NETWORK LOW NONE
Impact
PovjerljivostCjelovitostDostupnost
PARTIAL PARTIAL NONE
CVSS vektor AV:N/AC:L/Au:N/C:P/I:P/A:N
Zadnje važnije ažuriranje 28-03-2022 - 18:54
Objavljeno 21-03-2022 - 19:15