CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N
What the vulnerability does
Server-Side Request Forgery (SSRF) vulnerability in Gift Up! Gift Up Gift Cards for WordPress and WooCommerce gift-up allows Server Side Request Forgery.This issue affects Gift Up Gift Cards for WordPress and WooCommerce: from n/a through <= 3.1.7.
Explanation of Vulnerability in Simple Terms
The Gift Up Gift Cards plugin for WordPress and WooCommerce versions up to 3.1.7 contains a server-side request forgery vulnerability. An attacker can make the site send HTTP requests to internal or external systems on the attacker's behalf. The vulnerability requires specific conditions to exploit but can leak sensitive data or interact with services the site has access to.
What an attacker can do
Make the site send HTTP requests to internal systems or external URLs to read data or interact with services.
Potential impact on your site
Attackers could access internal services, read sensitive data, or perform actions on behalf of your site without your knowledge.
Conditions required to exploit
Network access to the site; no authentication or user interaction required, but exploitation requires specific conditions.
Key dates
External resources
Related vulnerabilities
