Lucene search

K
cvelistPatchstackCVELIST:CVE-2022-41685
HistoryNov 18, 2022 - 10:18 p.m.

CVE-2022-41685 Multiple Cross-Site Request Forgery (CSRF) vulnerabilities in Integration for Szamlazz.hu & WooCommerce and Csomagpontok és szállítási címkék WooCommerce hez plugins

2022-11-1822:18:33
CWE-352
Patchstack
www.cve.org
3
cve-2022-41685
cross-site request forgery
szamlazz.hu
woocommerce
csomagpontok
integration
wordpress

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

AI Score

9.2

Confidence

High

EPSS

0.001

Percentile

46.6%

Multiple Cross-Site Request Forgery (CSRF) vulnerabilities in Viszt Péter’s Integration for Szamlazz.hu & WooCommerce plugin <= 5.6.3.2 and Csomagpontok és szállítási címkék WooCommerce-hez plugin <= 1.9.0.2 on WordPress.

CNA Affected

[
  {
    "vendor": "Viszt Péter",
    "product": "Integration for Szamlazz.hu & WooCommerce (WordPress plugin)",
    "versions": [
      {
        "version": "<= 5.6.3.2",
        "status": "affected",
        "lessThanOrEqual": "5.6.3.2",
        "versionType": "custom"
      }
    ]
  },
  {
    "vendor": "Viszt Péter",
    "product": "Csomagpontok és szállítási címkék WooCommerce-hez (WordPress plugin)",
    "versions": [
      {
        "version": "<= 1.9.0.2",
        "status": "affected",
        "lessThanOrEqual": "1.9.0.2",
        "versionType": "custom"
      }
    ]
  }
]

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

AI Score

9.2

Confidence

High

EPSS

0.001

Percentile

46.6%

Related for CVELIST:CVE-2022-41685