CVE-2020-24142 | BDVDB-2026-156397 Detail

Description#

Server-side request forgery in the Video Downloader for TikTok (aka downloader-tiktok) plugin 1.3 for WordPress lets an attacker send crafted requests from the back-end server of a vulnerable web application via the njt-tk-download-video parameter. It can help identify open ports, local network hosts and execute command on services

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/secwx/research/blob/main/cve/CVE-2020-24142.md

Exploit#

No public exploit known

History#

Version 12021-07-07Record published in the CVE List.
Version 22024-08-04Most recent update recorded in the CVE List.