Description

A Blind SSRF vulnerability exists in the "Crawl Meta Data" functionality of SEO Panel version 4.10.0. This makes it possible for remote attackers to scan ports in the local environment.

Remediation

References

CVE-2024-22648

Related Vulnerabilities

Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-29046)

Perl Out-of-bounds Write Vulnerability (CVE-2018-6913)

Jenkins Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-3727)

Moodle Other Vulnerability (CVE-2006-4941)

WordPress 3.8.4 Multiple Vulnerabilities (3.8 - 3.8.4)

Severity

Medium

Classification

CVE-2024-22648 CWE-918 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Tags

Missing Update Known Vulnerabilities