CVE-2020-28976

EUVD-2020-21359
The Canto plugin 1.3.0 for WordPress contains a blind SSRF vulnerability. It allows an unauthenticated attacker can make a request to any internal and external server via /includes/lib/detail.php?subdomain=SSRF.
SSRF
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.3 MEDIUM
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 96%
Affected Products (NVD)
VendorProductVersion
cantocanto
1.3.0
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://packetstormsecurity.com/files/160358/WordPress-Canto-1.3.0-Server-Side-Request-Forgery.html
https://gist.github.com/p4nk4jv/87aebd999ce4b28063943480e95fd9e0
https://github.com/CantoDAM/Canto-Wordpress-Plugin
https://wordpress.org/plugins/canto/#developers
https://www.canto.com/integrations/wordpress/
http://packetstormsecurity.com/files/160358/WordPress-Canto-1.3.0-Server-Side-Request-Forgery.html
https://gist.github.com/p4nk4jv/87aebd999ce4b28063943480e95fd9e0
https://github.com/CantoDAM/Canto-Wordpress-Plugin
https://wordpress.org/plugins/canto/#developers
https://www.canto.com/integrations/wordpress/