CVE-2023-47655

2023-11-1822:15:09

CWE-352

[email protected]

web.nvd.nist.gov

cve-2023-47655

cross-site request forgery

csrf

marco milesi

anac xml bandi di gara

vulnerability

nvd

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

8.6 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

24.3%

JSON

Cross-Site Request Forgery (CSRF) vulnerability in Marco Milesi ANAC XML Bandi di Gara.This issue affects ANAC XML Bandi di Gara: from n/a through 7.5.

Affected configurations

Vulners

NVD

Node

marco_milesianac_xml_bandi_di_garaRange≤7.5

CPENameOperatorVersion
wpgov:anac_xml_bandi_di_garawpgov anac xml bandi di garale7.5

CPE	Name	Operator	Version
wpgov:anac_xml_bandi_di_gara	wpgov anac xml bandi di gara	le	7.5

CNA Affected

[
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "avcp",
    "product": "ANAC XML Bandi di Gara",
    "vendor": "Marco Milesi",
    "versions": [
      {
        "lessThanOrEqual": "7.5",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  }
]