CVE-2023-48281

2023-11-3014:15:10

CWE-352

[email protected]

web.nvd.nist.gov

cve-2023-48281

csrf

vulnerability

super blog me

broken link checker

youtube

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

8.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

24.2%

JSON

Cross-Site Request Forgery (CSRF) vulnerability in Super Blog Me Broken Link Checker for YouTube allows Cross Site Request Forgery.This issue affects Broken Link Checker for YouTube: from n/a through 1.3.

Affected configurations

Vulners

NVD

Node

super_blog_mebroken_link_checker_for_youtubeRange≤1.3

CPENameOperatorVersion
superblogme:broken_link_checker_for_youtubesuperblogme broken link checker for youtubele1.3

CPE	Name	Operator	Version
superblogme:broken_link_checker_for_youtube	superblogme broken link checker for youtube	le	1.3

CNA Affected

[
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "broken-link-checker-for-youtube",
    "product": "Broken Link Checker for YouTube",
    "vendor": "Super Blog Me",
    "versions": [
      {
        "lessThanOrEqual": "1.3",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  }
]

References

patchstack.com/database/vulnerability/broken-link-checker-for-youtube/wordpress-broken-link-checker-for-youtube-plugin-1-3-cross-site-request-forgery-csrf-vulnerability?_s_id=cve