CVE-2020-24063

Description

References

• gist.github.com/Hakooraevil/264cb21034f946eee62371e9111c36bb · Third Party Advisory
• CantoDAM/Canto-Wordpress-Plugin · Third Party Advisory
• wordpress.org/plugins/canto · Third Party Advisory
• canto.com/integrations/wordpress · Vendor Advisory

Altre vulnerabilità di canto

• CVE-2024-4936CRITICO 9.8The Canto plugin for WordPress is vulnerable to Remote File Inclusion in all versions up to, and including, 3.0.8 via the abspath parameter.…
• CVE-2024-25096CRITICO 9.8Improper Control of Generation of Code ('Code Injection') vulnerability in Canto Inc. Canto allows Code Injection.This issue affects Canto: …
• CVE-2023-3452CRITICO 9.8The Canto plugin for WordPress is vulnerable to Remote File Inclusion in versions up to, and including, 3.0.4 via the 'wp_abspath' parameter…
• CVE-2022-40305CRITICO 9.8A Server-Side Request Forgery issue in Canto Cumulus through 11.1.3 allows attackers to enumerate the internal network, overload network res…
• CVE-2020-28978MEDIO 5.3The Canto plugin 1.3.0 for WordPress contains blind SSRF vulnerability. It allows an unauthenticated attacker can make a request to any inte…