CVE-2023-45105

2023-12-1920:15:08

CWE-601

[email protected]

web.nvd.nist.gov

cve-2023-45105

url redirection

open redirect

servit software solutions

affiliate-toolkit

wordpress affiliate plugin

nvd

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

0.0005 Low

EPSS

Percentile

16.7%

JSON

URL Redirection to Untrusted Site (‘Open Redirect’) vulnerability in SERVIT Software Solutions affiliate-toolkit – WordPress Affiliate Plugin.This issue affects affiliate-toolkit – WordPress Affiliate Plugin: from n/a through 3.3.9.

Affected configurations

Vulners

NVD

Node

servit_software_solutionsaffiliate-toolkit_–_wordpress_affiliate_pluginRange≤3.3.9

CPENameOperatorVersion
servit:affiliate-toolkitservit affiliate-toolkitle3.3.9

CPE	Name	Operator	Version
servit:affiliate-toolkit	servit affiliate-toolkit	le	3.3.9

CNA Affected

[
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "affiliate-toolkit-starter",
    "product": "affiliate-toolkit – WordPress Affiliate Plugin",
    "vendor": "SERVIT Software Solutions",
    "versions": [
      {
        "changes": [
          {
            "at": "3.4.0",
            "status": "unaffected"
          }
        ],
        "lessThanOrEqual": "3.3.9",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  }
]

References

patchstack.com/database/vulnerability/affiliate-toolkit-starter/wordpress-affiliate-toolkit-wordpress-affiliate-plugin-plugin-3-3-9-open-redirection-vulnerability?_s_id=cve