CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
What the vulnerability does
The Auto Save Remote Images (Drafts) plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.0.9 via the fetch_images() function. This makes it possible for authenticated attackers, with Contributor-level access and above, to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services.
Explanation of Vulnerability in Simple Terms
Auto Save Remote Images (Drafts) versions 1.0.9 and earlier contain a server-side request forgery vulnerability. An authenticated user with low privileges can craft requests that make the site send HTTP requests to internal or external systems on the attacker's behalf. This could expose internal services or be used to interact with restricted resources. The vulnerability affects confidentiality and integrity but not availability.
What an attacker can do
Make the site send HTTP requests to internal systems or external URLs controlled by the attacker.
Potential impact on your site
Authenticated users can probe your internal network, access restricted services, or manipulate external systems your site connects to.
Conditions required to exploit
Attacker must have a low-privilege authenticated account; no user interaction required.
Key dates
External resources
