CVE-2023-49746

2023-12-0711:15:08

CWE-918

Patchstack

web.nvd.nist.gov

cve-2023-49746

server-side request forgery

ssrf

softaculous team

speedycache

cache optimization

performance

nvd

CVSS3

4.9

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N

AI Score

Confidence

High

EPSS

Percentile

14.0%

JSON

Server-Side Request Forgery (SSRF) vulnerability in Softaculous Team SpeedyCache – Cache, Optimization, Performance.This issue affects SpeedyCache – Cache, Optimization, Performance: from n/a through 1.1.2.

Affected configurations

Nvd

Vulners

Node

softaculousspeedycacheRange<1.1.3wordpress

VendorProductVersionCPE
softaculousspeedycache*cpe:2.3:a:softaculous:speedycache:*:*:*:*:*:wordpress:*:*

Vendor	Product	Version	CPE
softaculous	speedycache	*	cpe:2.3:a:softaculous:speedycache::::::wordpress::*

CNA Affected

[
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "speedycache",
    "product": "SpeedyCache – Cache, Optimization, Performance",
    "vendor": "Softaculous Team",
    "versions": [
      {
        "changes": [
          {
            "at": "1.1.3",
            "status": "unaffected"
          }
        ],
        "lessThanOrEqual": "1.1.2",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  }
]