The Canto plugin 1.3.0 for WordPress contains blind SSRF vulnerability. It allows an unauthenticated attacker can make a request to any internal and external server via /includes/lib/tree.php?subdomain=SSRF.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2020-11-30T13:21:27

Updated: 2024-08-04T16:48:00.600Z

Reserved: 2020-11-23T00:00:00

Link: CVE-2020-28978

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2020-11-30T14:15:11.287

Modified: 2024-11-21T05:23:26.403

Link: CVE-2020-28978

cve-icon Redhat

No data.