{"id":3049,"date":"2024-02-28T18:45:15","date_gmt":"2024-02-28T18:45:15","guid":{"rendered":"http:\/\/127.0.0.1\/friends-2-8-5-ssrf-autenticado-admin\/"},"modified":"2024-02-28T18:45:15","modified_gmt":"2024-02-28T18:45:15","slug":"friends-2-8-5-ssrf-autenticado-admin","status":"publish","type":"post","link":"http:\/\/127.0.0.1\/friends-2-8-5-ssrf-autenticado-admin\/","title":{"rendered":"Friends <= 2.8.5 – SSRF Autenticado (Admin+)"},"content":{"rendered":"
<\/p>\n
En este reporte se detalla la vulnerabilidad de Server-Side Request Forgery (SSRF) en el plugin Friends para WordPress en versiones hasta 2.8.5, la cual permite a atacantes autenticados realizar solicitudes a servidores arbitrarios desde la aplicaci\u00f3n web. La vulnerabilidad SSRF en el plugin Friends se encuentra en la funci\u00f3n discover_available_feeds, lo que posibilita a atacantes […]<\/p>\n","protected":false},"author":0,"featured_media":0,"comment_status":"","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[762],"class_list":["post-3049","post","type-post","status-publish","format-standard","hentry","category-uncategorized","tag-cve-2024-1978"],"yoast_head":"\n