CVE-2024-32955mediumCWE-918

CVE-2024-32955: falha de média gravidade em Foliovision FV Flowplayer Video Player

WordPress FV Flowplayer Video Player plugin <= 7.5.43.7212 - Server Side Request Forgery (SSRF) vulnerability

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar FV Flowplayer Video Player

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 4.9epss 0.3%
Server-Side Request Forgery (SSRF) vulnerability in Foliovision FV Flowplayer Video Player.This issue affects FV Flowplayer Video Player: from n/a through 7.5.43.7212.
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N
Produtos afetados
Foliovision · FV Flowplayer Video Player
CVEs relacionadas — Foliovision FV Flowplayer Video Player

No mesmo produto, das mais perigosas para as menos.

CVE-2018-0642—CVE-2018-0642EPSS 1.0%CVE-2024-32078MEDIUMWordPress FV Player plugin <= 7.5.44.7212 - Unvalidated Redirects and Forwards vulnerabilityEPSS 0.3%CVE-2024-35631HIGHWordPress FV Flowplayer Video Player plugin <= 7.5.45.7212 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%