HubSpot – CRM, Email Marketing, Live Chat, Forms & Analytics vulnerabilities
We track 1 vulnerability in HubSpot – CRM, Email Marketing, Live Chat, Forms & Analytics products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on May 2, 2022.
1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score
Latest HubSpot – CRM, Email Marketing, Live Chat, Forms & Analytics vulnerabilities
- 8.8 High severity
HubSpot – CRM, Email Marketing, Live Chat…: Server-Side Request Forgery
The HubSpot WordPress plugin before 8.8.15 does not validate the proxy URL given to the proxy REST endpoint, which could allow users with the edit_posts capability (by default contributor and above) to perform SSRF attacks