CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
What the vulnerability does
Server-Side Request Forgery (SSRF) vulnerability in BoldGrid Post and Page Builder by BoldGrid post-and-page-builder allows Server Side Request Forgery.This issue affects Post and Page Builder by BoldGrid: from n/a through <= 1.27.8.
Explanation of Vulnerability in Simple Terms
The Post and Page Builder by BoldGrid contains a server-side request forgery vulnerability that allows authenticated users to make the site send HTTP requests to internal or external systems on the attacker's behalf. An attacker with low-level site access can exploit this to access internal services, retrieve sensitive data, or interact with external systems. The vulnerability affects versions up to 1.27.8.
What an attacker can do
Make the site send HTTP requests to internal or external systems to access data or services.
Potential impact on your site
Attackers with contributor or editor access can probe internal networks, access cloud metadata, or interact with external APIs on behalf of your site.
Conditions required to exploit
Attacker must have a low-privilege authenticated account on the site.
Key dates
External resources
Related vulnerabilities
