Lucene search

[email protected]CVE-2012-4921

HistoryApr 10, 2014 - 8:29 p.m.

CVE-2012-4921

2014-04-1020:29:18

CWE-352

[email protected]

web.nvd.nist.gov

cve-2012-4921

csrf

dvs custom notification

wordpress

remote attackers

admin authentication

6.8 Medium

AI Score

Confidence

High

6.8 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

40.6%

JSON

Multiple cross-site request forgery (CSRF) vulnerabilities in the DVS Custom Notification plugin 1.0.1 and earlier for WordPress allow remote attackers to hijack the authentication of administrators for requests that (1) change application settings or (2) conduct cross-site scripting (XSS) attacks.

Affected configurations

NVD

Node

dvs_custom_notification_projectdvs_custom_notificationMatch1.0.1wordpress

CPENameOperatorVersion
dvs_custom_notification_project:dvs_custom_notificationdvs custom notification project dvs custom notificationeq1.0.1

CPE	Name	Operator	Version
dvs_custom_notification_project:dvs_custom_notification	dvs custom notification project dvs custom notification	eq	1.0.1

References

osvdb.org/89441

secunia.com/advisories/51531

6.8 Medium

AI Score

Confidence

High

6.8 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

40.6%

JSON

Related for CVE-2012-4921

prion1 cvelist1 wpvulndb1 patchstack1 nvd1