CVE-2021-24371 RSVPMaker < 8.7.3 - Authenticated (admin+) SSRF
Authenticated administrators can exploit an SSRF vulnerability in the RSVPMaker plugin to scan internal networks via unvalidated URL inputs.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2021-24371?
CVE-2021-24371 is a low-severity server-side request forgery vulnerability in Unknown RSVPMaker, published on 2 Aug 2021. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
The Import feature of the RSVPMaker WordPress plugin before 8.7.3 (/wp-admin/tools.php?page=rsvpmaker_export_screen) takes an URL input and calls curl on it, without first validating it to ensure it's a remote one. As a result, a high privilege user could use that feature to scan the internal network via a SSRF attack.
Weakness: CWE-918
Which versions are affected by CVE-2021-24371?
It affects 1 product.
Products include Carrcommunications Rsvpmaker.
How do I fix CVE-2021-24371?
No fix has been published for CVE-2021-24371 yet. Limit exposure of the affected software until one is available.
Upgrade, and send outbound requests through an allow-list that blocks internal addresses. More about Server-side request forgery.
Is CVE-2021-24371 being exploited?
There is no known exploitation of CVE-2021-24371 in the wild and no public exploit code.
Other vulnerabilities in Unknown RSVPMaker
- CVE-2024-50531 WordPress RSVPMaker for Toastmasters plugin <= 6.2.4 - Arbitrary File Upload vulnerability
- CVE-2023-25054 WordPress RSVPMarker Plugin <= 10.6.6 is vulnerable to Remote Code Execution (RCE)
- CVE-2022-1768 RSVPMaker <= 9.3.2 - Unauthenticated SQL Injection
- CVE-2022-1453 RSVPMaker <= 9.2.5 - Unauthenticated SQL Injection
- CVE-2022-1505 RSVPMaker <= 9.2.6 - Unauthenticated SQL Injection
Sources
Also known as GHSA-hjpv-ppp8-7v6j.