Vulnerability · Published Nov 13, 2023 · Assigned by Patchstack
CVE-2022-45835WordPress PhonePe Payment Solutions Plugin <= 1.0.15 is vulnerable to Server Side Request Forgery (SSRF)
Medium 5.8
In plain English
A medium-severity server-side request forgery in PhonePe Payment Solutions from PhonePe. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 37.7% (higher than 99% of all known vulnerabilities). Ready-made attack tooling exists: Nuclei.
Severity (CVSS 3.1)5.8Medium
Exploit odds (30 days)37.7%top 1.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack tooling1Nuclei
Official description
Server-Side Request Forgery (SSRF) vulnerability in PhonePe PhonePe Payment Solutions.This issue affects PhonePe Payment Solutions: from n/a through 1.0.15.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| PhonePe | PhonePe Payment Solutions | n/a – through 1.0.15 |
Weakness: CWE-918 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N