Lucene search

K
cve[email protected]CVE-2023-51487
HistoryMar 16, 2024 - 2:15 a.m.

CVE-2023-51487

2024-03-1602:15:07
CWE-352
web.nvd.nist.gov
40
cve-2023-51487
cross-site request forgery
csrf vulnerability
ari soft
ari stream quiz
nvd

5.4 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L

5.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.2%

Cross-Site Request Forgery (CSRF) vulnerability in ARI Soft ARI Stream Quiz.This issue affects ARI Stream Quiz: from n/a through 1.2.32.

Affected configurations

Vulners
Node
ari_softari_stream_quizRange1.2.32

CNA Affected

[
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "ari-stream-quiz",
    "product": "ARI Stream Quiz",
    "vendor": "ARI Soft",
    "versions": [
      {
        "changes": [
          {
            "at": "1.3.0",
            "status": "unaffected"
          }
        ],
        "lessThanOrEqual": "1.2.32",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  }
]

5.4 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L

5.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.2%

Related for CVE-2023-51487