| |
Vulnerability CVE-2014-9292
Published: 2014-12-05 Modified: 2014-12-06
| Description: |
Server-side request forgery (SSRF) vulnerability in proxy.php in the jRSS Widget plugin 1.2 and earlier for WordPress allows remote attackers to trigger outbound requests and enumerate open ports via the url parameter. |
CVSS2 => (AV:N/AC:M/Au:N/C:P/I:P/A:N)
| CVSS Base Score |
Impact Subscore |
Exploitability Subscore |
5.8/10 |
4.9/10 |
8.6/10 |
| Exploit range |
Attack complexity |
Authentication |
Remote |
Medium |
No required |
| Confidentiality impact |
Integrity impact |
Availability impact |
Partial |
Partial |
None |
References: |
http://codevigilant.com/disclosure/wp-plugin-jrss-widget-ssrfxspa/
|
|
|
Copyright 2024, cxsecurity.com
|
|
|
