CVE-2020-24063

概要

参考情報

• gist.github.com/Hakooraevil/264cb21034f946eee62371e9111c36bb · Third Party Advisory
• CantoDAM/Canto-Wordpress-Plugin · Third Party Advisory
• wordpress.org/plugins/canto · Third Party Advisory
• canto.com/integrations/wordpress · Vendor Advisory

canto のその他の脆弱性

• CVE-2024-4936緊急 9.8The Canto plugin for WordPress is vulnerable to Remote File Inclusion in all versions up to, and including, 3.0.8 via the abspath parameter.…
• CVE-2024-25096緊急 9.8Improper Control of Generation of Code ('Code Injection') vulnerability in Canto Inc. Canto allows Code Injection.This issue affects Canto: …
• CVE-2023-3452緊急 9.8The Canto plugin for WordPress is vulnerable to Remote File Inclusion in versions up to, and including, 3.0.4 via the 'wp_abspath' parameter…
• CVE-2022-40305緊急 9.8A Server-Side Request Forgery issue in Canto Cumulus through 11.1.3 allows attackers to enumerate the internal network, overload network res…
• CVE-2020-28978中 5.3The Canto plugin 1.3.0 for WordPress contains blind SSRF vulnerability. It allows an unauthenticated attacker can make a request to any inte…