Description

A Blind SSRF vulnerability exists in the "Crawl Meta Data" functionality of SEO Panel version 4.10.0. This makes it possible for remote attackers to scan ports in the local environment.

Remediation

References

CVE-2024-22648

Related Vulnerabilities

WordPress Plugin File Manager Arbitrary File Upload (6.8)

WordPress Plugin PIKLIST-Rapid development framework Cross-Site Scripting (0.9.4.25)

MySQL Improper Input Validation Vulnerability (CVE-2017-3258)

WordPress Plugin Twitter LiveBlog Cross-Site Request Forgery (1.1.2)

Ruby on Rails CVE-2021-22902 Vulnerability (CVE-2021-22902)

Severity

Medium

Classification

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Tags

Missing Update Known Vulnerabilities CWE-918 CVE-2024-22648