The Canto plugin 1.3.0 for WordPress contains a blind SSRF vulnerability. It allows an unauthenticated attacker can make a request to any internal and external server via /includes/lib/detail.php?subdomain=SSRF.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2020-11-30T13:14:45
Updated: 2024-08-04T16:48:00.549Z
Reserved: 2020-11-23T00:00:00
Link: CVE-2020-28976
Vulnrichment
No data.
NVD
Status : Modified
Published: 2020-11-30T14:15:11.160
Modified: 2024-11-21T05:23:25.890
Link: CVE-2020-28976
Redhat
No data.