4.3
Moyenne
CVE-2022-2912 The Craw Data WordPress plugin through 1.0.0 does not implement nonce checks, which could allow attackers to make a…
Description
The Craw Data WordPress plugin through 1.0.0 does not implement nonce checks, which could allow attackers to make a logged in admin change the url value performing unwanted crawls on third-party sites (SSRF).
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Craw Data | 1.0.0 | Pas de correctif indiqué |