Vulnerabilities > CVE-2022-40312 - Server-Side Request Forgery (SSRF) vulnerability in Givewp

047910
CVSS 6.5 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
LOW
Confidentiality impact
HIGH
Integrity impact
NONE
Availability impact
NONE
network
low complexity
givewp
CWE-918
NVD
Published: 2023-12-18
Updated: 2023-12-21

Summary

Server-Side Request Forgery (SSRF) vulnerability in GiveWP GiveWP – Donation Plugin and Fundraising Platform.This issue affects GiveWP – Donation Plugin and Fundraising Platform: from n/a through 2.25.1.

Vulnerable Configurations

Part Description Count
Application
Givewp
185

Common Weakness Enumeration (CWE)

References