Vulnerability Details : CVE-2020-28978
The Canto plugin 1.3.0 for WordPress contains blind SSRF vulnerability. It allows an unauthenticated attacker can make a request to any internal and external server via /includes/lib/tree.php?subdomain=SSRF.
Vulnerability category: Server-side request forgery (SSRF)
Products affected by CVE-2020-28978
- cpe:2.3:a:canto:canto:1.3.0:*:*:*:*:wordpress:*:*
Exploit prediction scoring system (EPSS) score for CVE-2020-28978
0.76%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 81 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2020-28978
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
5.0
|
MEDIUM | AV:N/AC:L/Au:N/C:P/I:N/A:N |
10.0
|
2.9
|
NIST | |
|
5.3
|
MEDIUM | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N |
3.9
|
1.4
|
NIST |
CWE ids for CVE-2020-28978
-
The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.Assigned by: nvd@nist.gov (Primary)
References for CVE-2020-28978
-
http://packetstormsecurity.com/files/160358/WordPress-Canto-1.3.0-Server-Side-Request-Forgery.html
WordPress Canto 1.3.0 Server-Side Request Forgery ≈ Packet StormThird Party Advisory;VDB Entry
-
https://github.com/CantoDAM/Canto-Wordpress-Plugin
GitHub - CantoDAM/Canto-Wordpress-PluginProduct
-
https://gist.github.com/p4nk4jv/87aebd999ce4b28063943480e95fd9e0
Wordpress Plugin Canto 1.3.0 - Blind SSRF Vulnerability · GitHubThird Party Advisory
-
https://wordpress.org/plugins/canto/#developers
Canto – WordPress plugin | WordPress.orgRelease Notes
-
https://www.canto.com/integrations/wordpress/
Integrations for Your DAM System – WordPress | CantoProduct
Jump to