CVE-2022-2912

CVE-2022-2912: Craw Data <= 1.0.0 - Server Side Request Forgery

Vendor Unknown

Product Craw Data

Weakness CWE-918 · SSRF

Published September 16, 2022

Last update June 3, 2025

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The Craw Data WordPress plugin through 1.0.0 does not implement nonce checks, which could allow attackers to make a logged in admin change the url value performing unwanted crawls on third-party sites (SSRF).

Key dates

02Disclosure timeline

September 16, 2022 CVE published

June 3, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2022-2912 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/918.html

Related vulnerabilities

04Related CVE

CVE-2017-20157 Ariadne Component Library Url.php server-side request forgery CVE-2021-43780 Server-Side Request Forgery (SSRF) in Redash CVE-2025-68696 httparty Has Potential SSRF Vulnerability That Leads to API Key Leakage CVE-2026-32037 OpenClaw < 2026.2.22 - Redirect Chain Bypass of Media Host Allowlist in MSTeams Attachment Handling CVE-2024-0601 ZhongFuCheng3y Austin Email Message Template AustinFileUtils.java getRemoteUrl2File server-side request forgery