CVE-2013-3477 in Related Posts

Riassunto

di MITRE

Cross-site request forgery (CSRF) vulnerability in the Related Posts by Zemanta plugin before 1.3.2 for WordPress allows remote attackers to hijack the authentication of unspecified users for requests that change settings via unknown vectors.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Prenotare: 07/05/2013
• Divulgazione: 27/05/2014
• Moderazione: accettato
• Voce: VDB-69840
• CPE: pronto
• CWE: CWE-352 (confermato)
• CVSS: 6.3 (VulDB)
• EPSS: 0.01070
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2013-3477
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2013-3477
• CVE Details: https://www.cvedetails.com/cve/CVE-2013-3477/