Vulnerability · Published Aug 2, 2021 · Assigned by WPScan
CVE-2021-24371RSVPMaker < 8.7.3 - Authenticated (admin+) SSRF
Low 2.7
In plain English
A low-severity server-side request forgery in RSVPMaker from Unknown. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.0% (higher than 63% of all known vulnerabilities).
Severity (CVSS NVD)2.7Low
Exploit odds (30 days)1.0%top 36.7% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
The Import feature of the RSVPMaker WordPress plugin before 8.7.3 (/wp-admin/tools.php?page=rsvpmaker_export_screen) takes an URL input and calls curl on it, without first validating it to ensure it's a remote one. As a result, a high privilege user could use that feature to scan the internal network via a SSRF attack.
Affected products (as reported)
Weakness: CWE-918
References
- https://wpscan.com/vulnerability/63be225c-ebee-4cac-b43e-cf033ee7425d x_refsource_MISC
- https://codevigilant.com/disclosure/2021/wp-plugin-rsvpmaker/ x_refsource_MISC