CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N
What the vulnerability does
Server-Side Request Forgery (SSRF) vulnerability in Global Payments GlobalPayments WooCommerce global-payments-woocommerce allows Server Side Request Forgery.This issue affects GlobalPayments WooCommerce: from n/a through <= 1.18.0.
Explanation of Vulnerability in Simple Terms
The GlobalPayments WooCommerce plugin versions up to 1.18.0 contain a server-side request forgery vulnerability. An attacker can make the plugin send HTTP requests to internal or external systems on behalf of the site. The vulnerability requires specific network conditions to exploit but can leak sensitive data or modify resources accessible to the server.
What an attacker can do
Make the site send HTTP requests to internal systems or external servers to read or modify data.
Potential impact on your site
Attackers could access internal services, leak data, or modify resources that the server can reach.
Conditions required to exploit
Network access to the site; no authentication or user interaction required, but attack complexity is high.
Key dates
External resources
Related vulnerabilities
