CVE-2022-3119

🗓️ 26 Sep 2022 12:35:44Reported by WPScanType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 1787 Views

The OAuth client Single Sign On WordPress plugin before 3.0.4 allows unauthenticated attackers to update settings and change OAuth endpoints

Reporter	Title	Published	Views	Family All 13
Circl	CVE-2022-3119	26 Sep 202216:21	–	circl
CNNVD	WordPress plugin OAuth client Single Sign On 跨站请求伪造漏洞	26 Sep 202200:00	–	cnnvd
CNVD	WordPress OAuth client Single Sign On Cross-Site Request Forgery Vulnerability	28 Sep 202200:00	–	cnvd
Cvelist	CVE-2022-3119 OAuth client Single Sign On for WordPress < 3.0.4 - Unauthenticated Settings Update to Authentication Bypass	26 Sep 202212:35	–	cvelist
EUVD	EUVD-2022-42546	3 Oct 202520:07	–	euvd
NVD	CVE-2022-3119	26 Sep 202213:15	–	nvd
OSV	CVE-2022-3119	26 Sep 202213:15	–	osv
Prion	Cross site request forgery (csrf)	26 Sep 202213:15	–	prion
Positive Technologies	PT-2022-20598 · WordPress · Oauth Client Single Sign On	26 Sep 202200:00	–	ptsecurity
RedhatCVE	CVE-2022-3119	22 May 202522:53	–	redhatcve

NVD

Vulners

Node

oauth_client_single_sign_on_project oauth_client_single_sign_onRange<3.0.4wordpress

[
  {
    "product": "OAuth client Single Sign On for WordPress ( OAuth 2.0 SSO )",
    "vendor": "Unknown",
    "versions": [
      {
        "lessThan": "3.0.4",
        "status": "affected",
        "version": "3.0.4",
        "versionType": "custom"
      }
    ]
  }
]