Description (CNA)
The HubSpot WordPress plugin before 8.8.15 does not validate the proxy URL given to the proxy REST endpoint, which could allow users with the edit_posts capability (by default contributor and above) to perform SSRF attacks
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Unknown / HubSpot – CRM, Email Marketing, Live Chat, Forms & Analytics | affected 8.8.15 before 8.8.15 |
CWE
CWE-918
References
ADP enrichment
No English description supplied.