Lucene search
HistoryMar 28, 2024 - 6:15 a.m.
CVE-2024-23500
kadence
gutenberg blocks
ssrf
vulnerability
7.7 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
6.8 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
9.1%
Server-Side Request Forgery (SSRF) vulnerability in Kadence WP Gutenberg Blocks by Kadence Blocks.This issue affects Gutenberg Blocks by Kadence Blocks: from n/a through 3.2.19.
Affected configurations
Node
kadence_wpgutenberg_blocks_by_kadence_blocksRange≤3.2.19
CNA Affected
[
{
"collectionURL": "https://wordpress.org/plugins",
"defaultStatus": "unaffected",
"packageName": "kadence-blocks",
"product": "Gutenberg Blocks by Kadence Blocks",
"vendor": "Kadence WP",
"versions": [
{
"changes": [
{
"at": "3.2.20",
"status": "unaffected"
}
],
"lessThanOrEqual": "3.2.19",
"status": "affected",
"version": "n/a",
"versionType": "custom"
}
]
}
]
7.7 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
6.8 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
9.1%
Related for CVE-2024-23500