Lucene search

[email protected]CVE-2023-22674

HistoryDec 21, 2023 - 3:15 p.m.

CVE-2023-22674

2023-12-2115:15:08

CWE-352

CWE-862

[email protected]

web.nvd.nist.gov

cve-2023-22674

missing authorization

cross-site request forgery

csrf

hal gatewood dashicons

custom post types

nvd

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

8.6 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

24.3%

JSON

Missing Authorization, Cross-Site Request Forgery (CSRF) vulnerability in Hal Gatewood Dashicons + Custom Post Types.This issue affects Dashicons + Custom Post Types: from n/a through 1.0.2.

Affected configurations

Vulners

NVD

Node

hal_gatewooddashicons_\+_custom_post_typesRange≤1.0.2

CPENameOperatorVersion
halgatewood:dashicons_\+_custom_post_typeshalgatewood dashicons + custom post typesle1.0.2

CPE	Name	Operator	Version
halgatewood:dashicons_\+_custom_post_types	halgatewood dashicons + custom post types	le	1.0.2

CNA Affected

[
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "dashicons-cpt",
    "product": "Dashicons + Custom Post Types",
    "vendor": "Hal Gatewood",
    "versions": [
      {
        "lessThanOrEqual": "1.0.2",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  }
]

References

patchstack.com/database/vulnerability/dashicons-cpt/wordpress-dashicons-custom-post-types-plugin-1-0-2-broken-access-control?_s_id=cve

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

8.6 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

24.3%

JSON

Related for CVE-2023-22674

prion1 cvelist1 nvd1