CVE-2020-28977
The Canto plugin 1.3.0 for WordPress contains blind SSRF vulnerability. It allows an unauthenticated attacker can make a request to any internal and external server via /includes/lib/get.php?subdomain=SSRF.
- Affected products
- Canto
- Canto
- = 1.3.0
- CVSS 3.1
- 5.3 MEDIUM
- EPSS
- 15.4% (97th percentile)
- Weakness
- CWE-918
- NVD status
- Modified
- Published
- 2020-11-30
CVE-2020-28977 at NVD
3 known exploits for CVE-2020-28977
Proof-of-concept code and exploit modules indexed by Sploitus