PT-2023-21139 · Unknown · Darren Cooney Instant Images

Universe · Published 2023-11-22 · Updated 2023-11-27 · CVE-2023-27451

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Darren Cooney Instant Images plugin versions <= 5.1.0.2

Description The issue is related to a Server-Side Request Forgery (SSRF) vulnerability. This means an attacker could potentially force the server to make requests to arbitrary domains, which could lead to unauthorized access to sensitive data or systems.

Recommendations For Darren Cooney Instant Images plugin versions <= 5.1.0.2, update to a version higher than 5.1.0.2 to resolve the issue.

Fix

SSRF

Weakness Enumeration

CWE-918

Related Identifiers

CVE-2023-27451

Affected Products

Darren Cooney Instant Images

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2023-27451 · Security Note
• https://osv.dev/vulnerability/CVE-2023-27451 · Vendor Advisory
• https://patchstack.com/database/vulnerability/instant-images/wordpress-instant-images-5-1-0-1-auth-server-side-request-forgery-ssrf-vulnerability?_s_id=cve · Note