CVE-2024-1812 — Server-Side Request Forgery in Everest Forms

CWE-918 — Server-Side Request Forgery3 documents3 sources
Severity
7.2HIGHNVD
EPSS
0.6%
top 29.66%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Wpeverest Everest Forms
Timeline
PublishedApr 9

Description

The Everest Forms plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.0.7 via the 'font_url' parameter. This makes it possible for unauthenticated attackers to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:NExploitability: 3.9 | Impact: 2.7

Affected Packages1 packages

Patches

Patch: plugins.trac.wordpress.org ↗Patch: plugins.trac.wordpress.org ↗

🔴Vulnerability Details

2
CVEList
Everest Forms <= 2.0.7 - Unauthenticated Server-Side Request Forgery via font_url↗2024-04-09
▶
GHSA
GHSA-g7vh-v2c6-r3fm: The Everest Forms plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2↗2024-04-09
▶
CVE-2024-1812 — Server-Side Request Forgery | cvebase