Telefication

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Telefication records in CISA KEV

No Telefication vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Telefication 1 record LOW

Records

1 record in Telefication · all components

TI-2021-16706 CVE-2021-39339 · GHSA-mjjq-h87j-hqxx

Telefication <= 1.8.0 Open Proxy and Server-Side Request Forgery

LOW 35

The Telefication WordPress plugin is vulnerable to Open Proxy and Server-Side Request Forgery via the ~/bypass.php file due to a user-supplied URL request value that gets called by a curl requests.

CVSS 3.1MEDIUM 5.8 Network No auth No interaction EPSS 0.01377 Published 2021-09-22 No fix listed CWE-918

Open these records in search →

Critical	0
High	0
Medium	1
Low	0
No CVSS	0