← CVE Intelligence

CVE-2022-2912

Craw Data <= 1.0.0 - Server Side Request Forgery PUBLISHED

Description (CNA)

The Craw Data WordPress plugin through 1.0.0 does not implement nonce checks, which could allow attackers to make a logged in admin change the url value performing unwanted crawls on third-party sites (SSRF).

Affected (CNA)

Vendor / productVersions
Unknown / Craw Dataaffected 1.0.0 through 1.0.0

CWE

CWE-918

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.