CVE-2020-28978
The Canto plugin 1.3.0 for WordPress contains blind SSRF vulnerability. It allows an unauthenticated attacker can make a request to any internal and external server via /includes/lib/tree.php?subdomain=SSRF.
- Affected products
- Canto
- Canto
- = 1.3.0
- CVSS 3.1
- 5.3 MEDIUM
- EPSS
- 15.4% (97th percentile)
- Weakness
- CWE-918
- NVD status
- Modified
- Published
- 2020-11-30
CVE-2020-28978 at NVD
3 known exploits for CVE-2020-28978
Proof-of-concept code and exploit modules indexed by Sploitus