Lucene search

[email protected]CVE-2020-5615

HistoryAug 04, 2020 - 2:15 a.m.

CVE-2020-5615

2020-08-0402:15:11

CWE-352

[email protected]

web.nvd.nist.gov

cve-2020-5615

csrf

vulnerability

calendar01

calendar02

free edition

ver1.0.0

remote attackers

authentication

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

9.2 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

65.8%

JSON

Cross-site request forgery (CSRF) vulnerability in [Calendar01] free edition ver1.0.0 and [Calendar02] free edition ver1.0.0 allows remote attackers to hijack the authentication of administrators via unspecified vectors.

Affected configurations

NVD

Node

calendar01_projectcalendar01Match1.0.0free

calendar02_projectcalendar02Match1.0.0free

CPENameOperatorVersion
calendar01_project:calendar01calendar01 project calendar01eq1.0.0
calendar02_project:calendar02calendar02 project calendar02eq1.0.0

CPE	Name	Operator	Version
calendar01_project:calendar01	calendar01 project calendar01	eq	1.0.0
calendar02_project:calendar02	calendar02 project calendar02	eq	1.0.0

CNA Affected

[
  {
    "product": "[Calendar01] and [Calendar02]",
    "vendor": "PHP Factory",
    "versions": [
      {
        "status": "affected",
        "version": "[Calendar01] free edition ver1.0.0 and [Calendar02] free edition ver1.0.0"
      }
    ]
  }
]

References

jvn.jp/en/jp/JVN73169744/index.html

www.php-factory.net/calendar/01.php

www.php-factory.net/calendar/02.php

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

9.2 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

65.8%

JSON

Related for CVE-2020-5615

nvd1 prion1 cvelist1 jvn1