WP <= 6.1.1 – Unauthenticated Blind SSRF via DNS Rebinding
-
Jetpack show me this guys please help me :/
What is the problem?
WordPress is affected by an unauthenticated blind SSRF in the pingback feature. Because of a TOCTOU race condition between the validation checks and the HTTP request, attackers can reach internal hosts that are explicitly forbidden.
Hello,
Thank you very much for choosing our theme and for contacting us.
Please make the full backup of your site and check the issue on the Storefront theme to detect if our theme causes the problem. Storefront is a free theme developed by WooСommerce.
if you see the same on the Storefront, please contact Jetpack support on this issue.
Best Regards
.
