Lucene search

K
cvePatchstackCVE-2022-42497
HistoryNov 18, 2022 - 11:15 p.m.

CVE-2022-42497

2022-11-1823:15:27
CWE-89
Patchstack
web.nvd.nist.gov
38
7
cve-2022-42497
arbitrary code execution
api2cart bridge connector
wordpress
nvd

CVSS3

10

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

AI Score

9.6

Confidence

High

EPSS

0.003

Percentile

69.4%

Arbitrary Code Execution vulnerability in Api2Cart Bridge Connector plugin <= 1.1.0 on WordPress.

Affected configurations

Nvd
Vulners
Node
api2cartapi2cart_bridge_connectorMatch1.0.0wordpress
OR
api2cartapi2cart_bridge_connectorMatch1.1.0wordpress
VendorProductVersionCPE
api2cartapi2cart_bridge_connector1.0.0cpe:2.3:a:api2cart:api2cart_bridge_connector:1.0.0:*:*:*:*:wordpress:*:*
api2cartapi2cart_bridge_connector1.1.0cpe:2.3:a:api2cart:api2cart_bridge_connector:1.1.0:*:*:*:*:wordpress:*:*

CNA Affected

[
  {
    "vendor": "API2Cart",
    "product": "Api2Cart Bridge Connector (WordPress plugin)",
    "versions": [
      {
        "version": "<= 1.1.0",
        "status": "affected",
        "lessThanOrEqual": "1.1.0",
        "versionType": "custom"
      }
    ]
  }
]

Social References

More

CVSS3

10

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

AI Score

9.6

Confidence

High

EPSS

0.003

Percentile

69.4%

Related for CVE-2022-42497