Lucene search

K
nvd[email protected]NVD:CVE-2022-29489
HistorySep 16, 2022 - 10:15 p.m.

CVE-2022-29489

2022-09-1622:15:10
CWE-352
web.nvd.nist.gov
cve-2022-29489
cross-site request forgery
sucuri security plugin
event log entry

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

EPSS

0.001

Percentile

20.9%

Cross-Site Request Forgery (CSRF) vulnerability in Sucuri Security plugin <= 1.8.33 at WordPress leading to Event log entry creation.

Affected configurations

Nvd
Node
sucurisecurityRange1.8.33wordpress
VendorProductVersionCPE
sucurisecurity*cpe:2.3:a:sucuri:security:*:*:*:*:*:wordpress:*:*

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

EPSS

0.001

Percentile

20.9%

Related for NVD:CVE-2022-29489