CVE-2024-27949: WordPress Sirv plugin <= 7.2.0 - Server Side Request Forgery (SSRF) vulnerability
Published Mar 1, 2024
·Updated
Server-Side Request Forgery (SSRF) vulnerability in Sirv CDN and Image Hosting Sirv sirv.This issue affects Sirv: from n/a through <= 7.2.0.
Affected Software
3 affected components
Sirv Image Optimizer, Resizer and CDN>=n/a, <=7.2.0
Sirv WordPress Sirv Plugin<=7.2.0
Sirv Sirv Wordpress<7.2.1
Remediation
Information
Update to 7.2.1 or a higher version.
Event History
Mar 1, 2024
CVE Published
via MITRE·07:30 AM
Data Sourced
via MITRE·07:30 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·08:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-27949?
CVE-2024-27949 has been classified as a critical Server-Side Request Forgery (SSRF) vulnerability.
2
How do I fix CVE-2024-27949?
To fix CVE-2024-27949, update the Sirv Image Optimizer, Resizer, and CDN to version 7.3.0 or later.
3
Which versions are affected by CVE-2024-27949?
CVE-2024-27949 affects all versions of Sirv Image Optimizer, Resizer, and CDN from n/a through 7.2.0.
4
What systems are impacted by CVE-2024-27949?
CVE-2024-27949 impacts Sirv Image Optimizer, Resizer, and CDN along with the Sirv WordPress Plugin.
5
What kind of vulnerability is CVE-2024-27949?
CVE-2024-27949 is a Server-Side Request Forgery (SSRF) vulnerability.