CVE-2023-35764

2024-04-0308:15:49

[email protected]

web.nvd.nist.gov

data verification

ip spoofing

survey maker

remote attack

nvd

6.8 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%

JSON

Insufficient verification of data authenticity issue in Survey Maker prior to 3.6.4 allows a remote unauthenticated attacker to spoof an IP address when posting.

Affected configurations

Vulners

Node

ays_pro_pluginssurvey_makerRange<4.1.0

CNA Affected

[
  {
    "vendor": "AYS Pro Plugins",
    "product": "Survey Maker",
    "versions": [
      {
        "version": "prior to 4.1.0",
        "status": "affected"
      }
    ]
  }
]

References

jvn.jp/en/jp/JVN51098626/

wordpress.org/plugins/survey-maker/