Lucene search

PatchstackCVE-2022-46866

HistoryMay 25, 2023 - 9:15 a.m.

CVE-2022-46866

2023-05-2509:15:11

CWE-352

Patchstack

web.nvd.nist.gov

cve-2022-46866

csrf

marty thornley

import external images plugin

vulnerability

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

8.8

Confidence

High

EPSS

0.001

Percentile

27.6%

JSON

Cross-Site Request Forgery (CSRF) vulnerability in Marty Thornley Import External Images plugin <= 1.4 versions.

Affected configurations

Nvd

Vulners

Node

import_external_images_projectimport_external_imagesRange≤1.4wordpress

VendorProductVersionCPE
import_external_images_projectimport_external_images*cpe:2.3:a:import_external_images_project:import_external_images:*:*:*:*:*:wordpress:*:*

Vendor	Product	Version	CPE
import_external_images_project	import_external_images	*	cpe:2.3:a:import_external_images_project:import_external_images::::::wordpress::*

CNA Affected

[
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "import-external-images",
    "product": "Import External Images",
    "vendor": "Marty Thornley",
    "versions": [
      {
        "lessThanOrEqual": "1.4",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  }
]

References

patchstack.com/database/vulnerability/import-external-images/wordpress-import-external-images-plugin-1-4-cross-site-request-forgery-csrf?_s_id=cve

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

8.8

Confidence

High

EPSS

0.001

Percentile

27.6%

JSON

Related for CVE-2022-46866