HubSpot WordPress Plugin Blind Server-Side Request Forgery Vulnerability

A server-side request forgery (SSRF) vulnerability has been identified in the HubSpot WordPress plugin, affecting versions prior to 8.8.15. The vulnerability arises because the plugin does not properly validate the proxy URL provided to the proxy REST endpoint. This flaw could enable users with the edit_posts capability, which includes contributors and higher roles, to execute SSRF attacks.

Impact

Exploitation of this vulnerability allows for blind server-side request forgery, where an authenticated user can make requests from the server to internal or external resources, potentially leading to unauthorized data access or manipulation.

Reproduction

To reproduce this vulnerability, an authenticated user with the edit_posts capability can send a request to the proxy REST endpoint with a crafted proxy URL. The REST nonce must be included to authenticate the request.

Remediation

Users are advised to update the HubSpot WordPress plugin to version 8.8.15 or later.