PT-2024-34911 · Unknown · I Thirteen Web Solution Responsive Filterable Portfolio

Zaidan Rizaki · Published 2024-11-09 · Updated 2024-11-12 · CVE-2024-51785

Positive Technologies (AI Summary)

CVSS v3.1

4.4

Medium

Base vector

AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions I Thirteen Web Solution Responsive Filterable Portfolio versions 1.0.0 through 1.0.22

Description The issue is a Server-Side Request Forgery (SSRF) vulnerability, which allows an attacker to perform Server Side Request Forgery. This can potentially lead to unauthorized access to internal resources.

Recommendations For versions 1.0.0 through 1.0.22, update to a version that contains a fix for this issue, as no specific mitigation measures are provided for these versions. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

SSRF

Weakness Enumeration

CWE-918

Related Identifiers

CVE-2024-51785

Affected Products

I Thirteen Web Solution Responsive Filterable Portfolio

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2024-51785 · Security Note
• https://t.me/cvedetector/10290 · Telegram Post
• https://patchstack.com/database/vulnerability/responsive-filterable-portfolio/wordpress-responsive-filterable-portfolio-plugin-1-0-22-server-side-request-forgery-ssrf-vulnerability?_s_id=cve · Note
• https://patchstack.com/database/Wordpress/Plugin/responsive-filterable-portfolio/vulnerability/wordpress-responsive-filterable-portfolio-plugin-1-0-22-server-side-request-forgery-ssrf-vulnerability?_s_id=cve · Note
• https://twitter.com/CVEnew/status/1855168615789572327 · Twitter Post