CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N
What the vulnerability does
Server-Side Request Forgery (SSRF) vulnerability in Varun Dubey Wbcom Designs - Activity Link Preview For BuddyPress activity-link-preview-for-buddypress allows Server Side Request Forgery.This issue affects Wbcom Designs - Activity Link Preview For BuddyPress: from n/a through <= 1.4.4.
Explanation of Vulnerability in Simple Terms
The Activity Link Preview plugin for BuddyPress versions up to 1.4.4 contains a server-side request forgery vulnerability. An attacker can make the site send HTTP requests to internal or external systems on the attacker's behalf. The vulnerability requires specific network conditions to exploit but can leak sensitive information or interact with internal services.
What an attacker can do
Make the site send HTTP requests to internal systems or external URLs to retrieve data or interact with services.
Potential impact on your site
Attackers could access internal services, leak sensitive data, or use your site to attack other systems.
Conditions required to exploit
Network access to the site; no authentication or user interaction required, but exploitation requires specific network conditions.
Key dates
External resources
Related vulnerabilities
