CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N
What the vulnerability does
Server-Side Request Forgery (SSRF) vulnerability in sonaar MP3 Audio Player for Music, Radio & Podcast by Sonaar mp3-music-player-by-sonaar allows Server Side Request Forgery.This issue affects MP3 Audio Player for Music, Radio & Podcast by Sonaar: from n/a through <= 5.11.
Explanation of Vulnerability in Simple Terms
The MP3 Audio Player for Music, Radio & Podcast by Sonaar contains a server-side request forgery vulnerability in versions up to 5.11. An attacker can make the site send HTTP requests to internal or external systems on the attacker's behalf. This can expose internal services, leak sensitive data, or be used to attack other systems. The vulnerability requires specific conditions to exploit but does not require authentication.
What an attacker can do
Make the site send HTTP requests to internal or external systems to access restricted resources or attack other services.
Potential impact on your site
Attackers could access internal services, leak data, or use your site to attack other systems without needing to log in.
Conditions required to exploit
Network access to the site; specific conditions must be met to trigger the vulnerability (attack complexity is high).
Key dates
External resources
Related vulnerabilities
