Vulnerabilities > CVE-2023-46641 - Server-Side Request Forgery (SSRF) vulnerability in Code4Recovery 12 Step Meeting List

CVSS 5.4 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

LOW

Integrity impact

LOW

Availability impact

NONE

network

low complexity

code4recovery

CWE-918

NVD

Published: 2023-12-07

Updated: 2023-12-12

Summary

Server-Side Request Forgery (SSRF) vulnerability in Code for Recovery 12 Step Meeting List.This issue affects 12 Step Meeting List: from n/a through 3.14.24.

Vulnerable Configurations

Part	Description	Count
Application	Code4Recovery Code4Recovery 12 Step Meeting List 3.4 Code4Recovery 12 Step Meeting List 3.4.1 Code4Recovery 12 Step Meeting List 3.4.2 Code4Recovery 12 Step Meeting List 3.4.3 Code4Recovery 12 Step Meeting List 3.4.4 Code4Recovery 12 Step Meeting List 3.4.5 Code4Recovery 12 Step Meeting List 3.4.6 Code4Recovery 12 Step Meeting List 3.4.7 Code4Recovery 12 Step Meeting List 3.4.9 Code4Recovery 12 Step Meeting List 3.4.10 Code4Recovery 12 Step Meeting List 3.4.11 Code4Recovery 12 Step Meeting List 3.4.12 Code4Recovery 12 Step Meeting List 3.4.13 Code4Recovery 12 Step Meeting List 3.4.14 Code4Recovery 12 Step Meeting List 3.4.15 Code4Recovery 12 Step Meeting List 3.4.16 Code4Recovery 12 Step Meeting List 3.4.17 Code4Recovery 12 Step Meeting List 3.4.18 Code4Recovery 12 Step Meeting List 3.4.19 Code4Recovery 12 Step Meeting List 3.4.20 Code4Recovery 12 Step Meeting List 3.4.21 Code4Recovery 12 Step Meeting List 3.4.22 Code4Recovery 12 Step Meeting List 3.5.0 Code4Recovery 12 Step Meeting List 3.5.1 Code4Recovery 12 Step Meeting List 3.5.2 Code4Recovery 12 Step Meeting List 3.5.3 Code4Recovery 12 Step Meeting List 3.5.4 Code4Recovery 12 Step Meeting List 3.6.0 Code4Recovery 12 Step Meeting List 3.6.1 Code4Recovery 12 Step Meeting List 3.6.2 Code4Recovery 12 Step Meeting List 3.6.3 Code4Recovery 12 Step Meeting List 3.6.4 Code4Recovery 12 Step Meeting List 3.6.5 Code4Recovery 12 Step Meeting List 3.6.6 Code4Recovery 12 Step Meeting List 3.7.0 Code4Recovery 12 Step Meeting List 3.7.1 Code4Recovery 12 Step Meeting List 3.7.2 Code4Recovery 12 Step Meeting List 3.8.0 Code4Recovery 12 Step Meeting List 3.9.0 Code4Recovery 12 Step Meeting List 3.9.1 Code4Recovery 12 Step Meeting List 3.9.2 Code4Recovery 12 Step Meeting List 3.9.3 Code4Recovery 12 Step Meeting List 3.9.4 Code4Recovery 12 Step Meeting List 3.9.5 Code4Recovery 12 Step Meeting List 3.9.6 Code4Recovery 12 Step Meeting List 3.10.0 Code4Recovery 12 Step Meeting List 3.11.0 Code4Recovery 12 Step Meeting List 3.11.1 Code4Recovery 12 Step Meeting List 3.11.2 Code4Recovery 12 Step Meeting List 3.11.3 Code4Recovery 12 Step Meeting List 3.12 Code4Recovery 12 Step Meeting List 3.12.1 Code4Recovery 12 Step Meeting List 3.12.2 Code4Recovery 12 Step Meeting List 3.13 Code4Recovery 12 Step Meeting List 3.14 Code4Recovery 12 Step Meeting List 3.14.1 Code4Recovery 12 Step Meeting List 3.14.2 Code4Recovery 12 Step Meeting List 3.14.3 Code4Recovery 12 Step Meeting List 3.14.4 Code4Recovery 12 Step Meeting List 3.14.5 Code4Recovery 12 Step Meeting List 3.14.6 Code4Recovery 12 Step Meeting List 3.14.7 Code4Recovery 12 Step Meeting List 3.14.8 Code4Recovery 12 Step Meeting List 3.14.9 Code4Recovery 12 Step Meeting List 3.14.10 Code4Recovery 12 Step Meeting List 3.14.11 Code4Recovery 12 Step Meeting List 3.14.12 Code4Recovery 12 Step Meeting List 3.14.13 Code4Recovery 12 Step Meeting List 3.14.14 Code4Recovery 12 Step Meeting List 3.14.15 Code4Recovery 12 Step Meeting List 3.14.16 Code4Recovery 12 Step Meeting List 3.14.17 Code4Recovery 12 Step Meeting List 3.14.18 Code4Recovery 12 Step Meeting List 3.14.19 Code4Recovery 12 Step Meeting List 3.14.20 Code4Recovery 12 Step Meeting List 3.14.21 Code4Recovery 12 Step Meeting List 3.14.22 Code4Recovery 12 Step Meeting List 3.14.23 Code4Recovery 12 Step Meeting List 3.14.24	79

Common Weakness Enumeration (CWE)

CWE-918 - Server-Side Request Forgery (SSRF)

References

https://patchstack.com/database/vulnerability/12-step-meeting-list/wordpress-12-step-meeting-list-plugin-3-14-24-server-side-request-forgery-ssrf-vulnerability?_s_id=cve