CVE-2014-9292

{"id": "CVE-2014-9292", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.8, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 4.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}]}, "published": "2014-12-05T22:59:00.067", "references": [{"url": "http://codevigilant.com/disclosure/wp-plugin-jrss-widget-ssrfxspa/", "tags": ["Exploit"], "source": "cve@mitre.org"}, {"url": "http://codevigilant.com/disclosure/wp-plugin-jrss-widget-ssrfxspa/", "tags": ["Exploit"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Server-side request forgery (SSRF) vulnerability in proxy.php in the jRSS Widget plugin 1.2 and earlier for WordPress allows remote attackers to trigger outbound requests and enumerate open ports via the url parameter."}, {"lang": "es", "value": "Vulnerabilidad de SSRF en proxy.php en el plugin jRSS Widget 1.2 y anteriores para WordPress permite a atacantes remotos provocar solicitudes salientes y enumerar puertos abiertos a trav\u00e9s del par\u00e1metro url."}], "lastModified": "2025-04-12T10:46:40.837", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:jrss_widget_project:jrss_widget:*:*:*:*:*:wordpress:*:*", "vulnerable": true, "matchCriteriaId": "33549B4E-1876-4CC6-8086-C54DB9146A99", "versionEndIncluding": "1.2"}], "operator": "OR"}]}], "evaluatorComment": "<a href=\"http://cwe.mitre.org/data/definitions/918.html\">CWE-918: Server-Side Request Forgery (SSRF)</a>", "sourceIdentifier": "cve@mitre.org"}