Lucene search

K
cvePatchstackCVE-2023-49853
HistoryDec 18, 2023 - 3:15 p.m.

CVE-2023-49853

2023-12-1815:15:09
CWE-352
Patchstack
web.nvd.nist.gov
58
cve-2023-49853
csrf vulnerability
paytr
taksit tablosu
woocommerce
nvd

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

8.6

Confidence

High

EPSS

0.001

Percentile

24.1%

Cross-Site Request Forgery (CSRF) vulnerability in PayTR Ödeme ve Elektronik Para Kuruluşu A.Ş. PayTR Taksit Tablosu – WooCommerce.This issue affects PayTR Taksit Tablosu – WooCommerce: from n/a through 1.3.1.

Affected configurations

Nvd
Vulners
Node
paytrpaytr_taksit_tablosu_-_woocommerceRange1.3.1wordpress
VendorProductVersionCPE
paytrpaytr_taksit_tablosu_-_woocommerce*cpe:2.3:a:paytr:paytr_taksit_tablosu_-_woocommerce:*:*:*:*:*:wordpress:*:*

CNA Affected

[
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "paytr-taksit-tablosu-woocommerce",
    "product": "PayTR Taksit Tablosu – WooCommerce",
    "vendor": "PayTR Ödeme ve Elektronik Para Kuruluşu A.Ş.",
    "versions": [
      {
        "lessThanOrEqual": "1.3.1",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  }
]

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

8.6

Confidence

High

EPSS

0.001

Percentile

24.1%

Related for CVE-2023-49853