CVE-2026-24639

MEDIUM

Author Server Side Request Forgery (SSRF) in Photo Block <= 1.7.1 versions.

StatusDeferred

설명

Author Server Side Request Forgery (SSRF) in Photo Block <= 1.7.1 versions.

Score Summary

CVSS Score: 4.4
Version: 3.1
VPI: 44
Why this VPI (explainable, experimental)
VPI breakdown
Impact 44.00
Exploitation signal(No additional exploitation signal) ×1.00
VPI 44.00
VPI formula vpi-v1
EPSS: 0.2%
(상위 5.66%)
Attack Vector: Network
High Complexity
High Privileges
No User Interaction
Scope Changed
Low Confidentiality Impact
Low Integrity Impact
No Availability Impact

Details

CWE Weakness Classification

References (1)

Impact	44.00
Exploitation signal(No additional exploitation signal)	×1.00
VPI	44.00