Lucene search
WPScanCVELIST:CVE-2023-1093HistoryMar 27, 2023 - 3:37 p.m.
CVE-2023-1093 OAuth Single Sign On - SSO (OAuth Client) < 6.24.2 - IdP Discard via CSRF
2023-03-2715:37:22
WPScan
www.cve.org
4
cve-2023-1093
wordpress
csrf
oauth client
identify providers
EPSS
0.001
Percentile
33.2%
The OAuth Single Sign On WordPress plugin before 6.24.2 does not have CSRF checks when discarding Identify providers (IdP), which could allow attackers to make logged in admins delete all IdP via a CSRF attack
CNA Affected
[
{
"vendor": "Unknown",
"product": "OAuth Single Sign On",
"versions": [
{
"status": "affected",
"versionType": "custom",
"version": "0",
"lessThan": "6.24.2"
}
],
"defaultStatus": "unaffected",
"collectionURL": "https://wordpress.org/plugins"
}
]Related
cve
cve
CVE-2023-1093
2023-03-27 16:15:09
wpvulndb
wpvulndb
OAuth Single Sign On - SSO (OAuth Client) < 6.24.2 - IdP Discard via CSRF
2023-02-28 00:00:00
prion
prion
Cross site request forgery (csrf)
2023-03-27 16:15:00
wpexploit
wpexploit
OAuth Single Sign On - SSO (OAuth Client) < 6.24.2 - IdP Discard via CSRF
2023-02-28 00:00:00
nvd
nvd
CVE-2023-1093
2023-03-27 16:15:09