Lucene search
PatchstackCVELIST:CVE-2023-36381HistoryDec 28, 2023 - 10:34 a.m.
CVE-2023-36381 WordPress Zippy Plugin <= 1.6.5 is vulnerable to PHP Object Injection
2023-12-2810:34:46
CWE-502
Patchstack
www.cve.org
1
wordpress zippy plugin
vulnerability
php object injection
deserialization
gesundheit bewegt gmbh
CVSS3
6.6
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L
AI Score
8.9
Confidence
High
EPSS
0.001
Percentile
20.5%
Deserialization of Untrusted Data vulnerability in Gesundheit Bewegt GmbH Zippy.This issue affects Zippy: from n/a through 1.6.5.
CNA Affected
[
{
"collectionURL": "https://wordpress.org/plugins",
"defaultStatus": "unaffected",
"packageName": "zippy",
"product": "Zippy",
"vendor": "Gesundheit Bewegt GmbH",
"versions": [
{
"changes": [
{
"at": "1.6.6",
"status": "unaffected"
}
],
"lessThanOrEqual": "1.6.5",
"status": "affected",
"version": "n/a",
"versionType": "custom"
}
]
}
]Related
nvd
nvd
CVE-2023-36381
2023-12-28 11:15:09
prion
prion
Deserialization of untrusted data
2023-12-28 11:15:00
cve
cve
CVE-2023-36381
2023-12-28 11:15:09
CVSS3
6.6
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L
AI Score
8.9
Confidence
High
EPSS
0.001
Percentile
20.5%
Related for CVELIST:CVE-2023-36381