2024-05-29 14:04:39 +00:00

24 lines
942 B
JSON

{
"id": "CVE-2024-3050",
"sourceIdentifier": "contact@wpscan.com",
"published": "2024-05-29T06:18:32.417",
"lastModified": "2024-05-29T13:02:09.280",
"vulnStatus": "Awaiting Analysis",
"descriptions": [
{
"lang": "en",
"value": "The Site Reviews WordPress plugin before 7.0.0 retrieves client IP addresses from potentially untrusted headers, allowing an attacker to manipulate its value. This may be used to bypass IP-based blocking"
},
{
"lang": "es",
"value": "El complemento Site Reviews de WordPress anterior a 7.0.0 recupera direcciones IP de clientes de encabezados potencialmente no confiables, lo que permite a un atacante manipular su valor. Esto puede usarse para evitar el bloqueo basado en IP."
}
],
"metrics": {},
"references": [
{
"url": "https://wpscan.com/vulnerability/04c1581e-fd36-49d4-8463-b49915d4b1ac/",
"source": "contact@wpscan.com"
}
]
}