CVE-2022-1239 — HubSpot < 8.8.15 - Contributor+ Blind SSRF
The HubSpot WordPress plugin before 8.8.15 does not validate the proxy URL given to the proxy REST endpoint, which could allow users with the edit_posts capability (by default c…
Published: 2022-05-02 · CVSS: Unscored
The HubSpot WordPress plugin before 8.8.15 does not validate the proxy URL given to the proxy REST endpoint, which could allow users with the edit_posts capability (by default contributor and above) to perform SSRF attacks
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7