Lucene search

K
cve[email protected]CVE-2023-51407
HistoryMar 16, 2024 - 1:15 a.m.

CVE-2023-51407

2024-03-1601:15:48
CWE-352
web.nvd.nist.gov
21
cve-2023-51407
csrf
vulnerability
rocket elements
split test
elementor
nvd

4.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

4.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.2%

Cross-Site Request Forgery (CSRF) vulnerability in Rocket Elements Split Test For Elementor.This issue affects Split Test For Elementor: from n/a through 1.6.9.

Affected configurations

Vulners
Node
rocket_elementssplit_test_for_elementorRange1.6.9

CNA Affected

[
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "split-test-for-elementor",
    "product": "Split Test For Elementor",
    "vendor": "Rocket Elements",
    "versions": [
      {
        "changes": [
          {
            "at": "1.7.0",
            "status": "unaffected"
          }
        ],
        "lessThanOrEqual": "1.6.9",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  }
]

4.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

4.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.2%

Related for CVE-2023-51407