Lucene search

[email protected]CVE-2022-1424

HistoryJun 08, 2022 - 10:15 a.m.

CVE-2022-1424

2022-06-0810:15:00

CWE-352

[email protected]

web.nvd.nist.gov

security

wordpress

theme

csrf

vulnerability

nvd

cve-2022-1424

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.001 Low

EPSS

Percentile

26.0%

JSON

The Ask me WordPress theme before 6.8.2 does not perform CSRF checks for any of its AJAX actions, allowing an attacker to trick logged in users to perform various actions on their behalf on the site.

VendorProductVersionCPE
2codeask_me*cpe:2.3:a:2code:ask_me:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
2code	ask_me	*	cpe:2.3:a:2code:ask_me::::::::

References

wpscan.com/vulnerability/147b4097-dec8-4542-b122-7b237db81c05

Social References

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.001 Low

EPSS

Percentile

26.0%

JSON

Related for CVE-2022-1424

patchstack1 cvelist1 cnvd1 prion1