CVE-2020-24149

EUVD-2020-16885 · Published Jul 7, 2021

Server-side request forgery (SSRF) in the Podcast Importer SecondLine (podcast-importer-secondline) plugin 1.1.4 for WordPress via the podcast_feed parameter in a secondline_import_initialize action to the secondlinepodcastimport page.

Technologies

Secondline Podcast Importer Secondline

Weaknesses

CWE-918

CVSS scores

v3.17.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
v2.05.0AV:N/AC:L/Au:N/C:N/I:N/A:P

MITRE ATT&CK

Inferred

Where this vulnerability fits in an attack

ReconImpact

Initial Access

T1190Exploit Public-Facing Application

References

https://github.com/secwx/research/blob/main/cve/CVE-2020-24149.md
https://wordpress.org/plugins/podcast-importer-secondline/#developers

Potentially impacted assets

See if this affects your attack surface