1. Home
  2. CVE Database
  3. CVE-2014-9292
MEDIUM · 5.8

CVE-2014-9292

Server-side request forgery (SSRF) vulnerability in proxy.php in the jRSS Widget plugin 1.2 and earlier for WordPress allows remote attackers to trigger outbound requests and enumerate open ports via ...

Vulnerability Description

Server-side request forgery (SSRF) vulnerability in proxy.php in the jRSS Widget plugin 1.2 and earlier for WordPress allows remote attackers to trigger outbound requests and enumerate open ports via the url parameter.

CVSS Score

5.8

MEDIUM

AV:N/AC:M/Au:N/C:P/I:P/A:N
Confidentiality
PARTIAL
Integrity
PARTIAL
Availability
NONE

Affected Products

VendorProductVersions
Jrss Widget ProjectJrss Widget<= 1.2

References

FAQ

What is CVE-2014-9292?

CVE-2014-9292 is a vulnerability with a CVSS score of 5.8 (MEDIUM). Server-side request forgery (SSRF) vulnerability in proxy.php in the jRSS Widget plugin 1.2 and earlier for WordPress allows remote attackers to trigger outbound requests and enumerate open ports via ...

How severe is CVE-2014-9292?

CVE-2014-9292 has been rated MEDIUM with a CVSS base score of 5.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2014-9292?

Check the references section above for vendor advisories and patch information. Affected products include: Jrss Widget Project Jrss Widget.