CVE-2020-28977

The Canto plugin 1.3.0 for WordPress contains blind SSRF vulnerability. It allows an unauthenticated attacker can make a request to any internal and external server via /includes/lib/get.php?subdomain=SSRF.

CVSS v3.1 NVD

5.3 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CVSS v2.0 NVD

5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N

EPSS

15.43% chance of exploitation in the next 30 days, 97th percentile

Published

2020-11-30

Updated

2024-08-04

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/49189

Security advisories

• http://packetstormsecurity.com/files/160358/WordPress-Canto-1.3.0-Server-Side-Request-For…
• https://gist.github.com/p4nk4jv/87aebd999ce4b28063943480e95fd9e0
• https://wordpress.org/plugins/canto/#developers
• CantoDAM/Canto-Wordpress-Plugin
• https://www.canto.com/integrations/wordpress

References

• CVE Record
• NVD entry