CVE-2022-1037: EXMAGE < 1.0.7 - Admin+ Blind SSRF
Published Apr 18, 2022
·Updated
The EXMAGE WordPress plugin before 1.0.7 does to ensure that images added via URLs are external images, which could lead to a blind SSRF issue by using local URLs
Affected Software
1 affected component
Villatheme Exmage Wordpress<1.0.7
Event History
Apr 18, 2022
CVE Published
via MITRE·05:10 PM
Data Sourced
via MITRE·05:10 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the vulnerability ID for the EXMAGE WordPress plugin issue?
The vulnerability ID for the EXMAGE WordPress plugin issue is CVE-2022-1037.
2
What is the severity of CVE-2022-1037?
The severity of CVE-2022-1037 is high with a severity score of 7.2.
3
How does CVE-2022-1037 affect the EXMAGE WordPress plugin?
CVE-2022-1037 affects the EXMAGE WordPress plugin version up to and exclusive of 1.0.7.
4
What is the Common Weakness Enumeration (CWE) ID for CVE-2022-1037?
The Common Weakness Enumeration (CWE) ID for CVE-2022-1037 is 918.
5
How can the blind SSRF issue in the EXMAGE WordPress plugin be exploited?
The blind SSRF issue in the EXMAGE WordPress plugin can be exploited by using local URLs for externally added images.