CVE-2022-3708
published 2022-10-28CVE-2022-3708: The Web Stories plugin for WordPress is vulnerable to Server-Side Request Forgery in versions up to, and including 1.24.0 due to insufficient validation of…
PriorityP346high8.1CVSS 3.1
AVNACLPRLUINSUCHIHAN
EPSS
0.69%
48.7th percentile
The Web Stories plugin for WordPress is vulnerable to Server-Side Request Forgery in versions up to, and including 1.24.0 due to insufficient validation of URLs supplied via the 'url' parameter found via the /v1/hotlink/proxy REST API Endpoint. This makes it possible for authenticated users to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| web_stories | < 1.25.0 | 1.25.0 | |
| web_stories | <= 1.24.0 | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
https://github.com/GoogleForCreators/web-stories-wp/commit/3ad2099f95155d658624ffac2e34ce0da739e34bhttps://github.com/GoogleForCreators/web-stories-wp/compare/v1.24.0...v1.25.0https://wordpress.org/plugins/web-storieshttps://www.wordfence.com/threat-intel/vulnerabilities/id/7817a840-325a-4709-8374-84bb32d98d0e?source=cvehttps://www.wordfence.com/vulnerability-advisories-continued/#CVE-2022-3708https://github.com/GoogleForCreators/web-stories-wp/commit/3ad2099f95155d658624ffac2e34ce0da739e34bhttps://github.com/GoogleForCreators/web-stories-wp/compare/v1.24.0...v1.25.0https://wordpress.org/plugins/web-storieshttps://www.wordfence.com/threat-intel/vulnerabilities/id/7817a840-325a-4709-8374-84bb32d98d0e?source=cvehttps://www.wordfence.com/vulnerability-advisories-continued/#CVE-2022-3708
2022-10-28
Published