PT-2023-30133 · Unknown · 12 Step Meeting List

Shahzaib Ali Khan · Publicado 2023-12-07 · Atualizado 2023-12-12 · CVE-2023-46641

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions 12 Step Meeting List versions 3.14.24 and earlier

Description A Server-Side Request Forgery (SSRF) issue has been identified. This issue allows an attacker to forge requests from the server, potentially leading to unauthorized access to internal resources.

Recommendations For versions 3.14.24 and earlier, update to a version later than 3.14.24 to resolve the issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

SSRF

Enumeração de Fraquezas

CWE-918

Identificadores relacionados

CVE-2023-46641

Produtos afetados

12 Step Meeting List

Referências · 6

• https://osv.dev/vulnerability/CVE-2023-46641 · Aviso do Fabricante
• https://t.me/cvenotify/62688 · Publicação no Telegram
• https://twitter.com/VulmonFeeds/status/1732756010333336006 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2023-46641 · Nota de Segurança
• https://twitter.com/CVEnew/status/1732720063851970899 · Publicação no Twitter
• https://patchstack.com/database/vulnerability/12-step-meeting-list/wordpress-12-step-meeting-list-plugin-3-14-24-server-side-request-forgery-ssrf-vulnerability?_s_id=cve · Nota