CVE-2020-28977

概要

参考情報

• packetstormsecurity.com/files/160358/WordPress-Canto-1.3.0-Server-Side-Request-Forgery.html · Third Party Advisory
• gist.github.com/p4nk4jv/87aebd999ce4b28063943480e95fd9e0 · Third Party Advisory
• CantoDAM/Canto-Wordpress-Plugin · Product
• wordpress.org/plugins/canto · Release Notes
• canto.com/integrations/wordpress · Product

canto のその他の脆弱性

• CVE-2024-4936緊急 9.8The Canto plugin for WordPress is vulnerable to Remote File Inclusion in all versions up to, and including, 3.0.8 via the abspath parameter.…
• CVE-2024-25096緊急 9.8Improper Control of Generation of Code ('Code Injection') vulnerability in Canto Inc. Canto allows Code Injection.This issue affects Canto: …
• CVE-2023-3452緊急 9.8The Canto plugin for WordPress is vulnerable to Remote File Inclusion in versions up to, and including, 3.0.4 via the 'wp_abspath' parameter…
• CVE-2022-40305緊急 9.8A Server-Side Request Forgery issue in Canto Cumulus through 11.1.3 allows attackers to enumerate the internal network, overload network res…
• CVE-2020-28978中 5.3The Canto plugin 1.3.0 for WordPress contains blind SSRF vulnerability. It allows an unauthenticated attacker can make a request to any inte…