Lucene search

K
nvd[email protected]NVD:CVE-2022-38704
HistorySep 23, 2022 - 7:15 p.m.

CVE-2022-38704

2022-09-2319:15:14
CWE-352
web.nvd.nist.gov
3
cve-2022-38704
cross-site request forgery
seo redirection plugin
wordpress
deletion
redirection history

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

EPSS

0.001

Percentile

20.8%

Cross-Site Request Forgery (CSRF) vulnerability in SEO Redirection plugin <= 8.9 at WordPress, leading to deletion of 404 errors and redirection history.

Affected configurations

Nvd
Node
clogicaseo_redirectionRange8.9wordpress
VendorProductVersionCPE
clogicaseo_redirection*cpe:2.3:a:clogica:seo_redirection:*:*:*:*:*:wordpress:*:*

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

EPSS

0.001

Percentile

20.8%

Related for NVD:CVE-2022-38704