← back
CVE-2020-28977

CVE-2020-28977

28Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendepss 15%
from disclosure to weapon4 days
Published on NVDNov 30
1st PoC+4d
exploitation probability
15%top 4% of all CVEs
observed exploitation
nono source reports it
2 public exploit(s)
The Canto plugin 1.3.0 for WordPress contains blind SSRF vulnerability. It allows an unauthenticated attacker can make a request to any internal and external server via /includes/lib/get.php?subdomain=SSRF.
Affected products
n/a · n/a
public PoCs found — 2
cve_referencepacketstormsecurity.com/files/160358/WordPress-Canto-1.3.0-Server-Side-Request-Forgery.htmlunverifiedexploitdbwww.exploit-db.com/exploits/49189unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
References
http://packetstormsecurity.com/files/160358/WordPress-Canto-1.3.0-Server-Side-Request-Forgery.htmlhttps://gist.github.com/p4nk4jv/87aebd999ce4b28063943480e95fd9e0https://github.com/CantoDAM/Canto-Wordpress-Pluginhttps://wordpress.org/plugins/canto/#developershttps://www.canto.com/integrations/wordpress/