Lucene search
PatchstackCVE-2023-51489HistoryMar 16, 2024 - 1:15 a.m.
CVE-2023-51489
2024-03-1601:15:49
CWE-352
Patchstack
web.nvd.nist.gov
21
cve-2023-51489
cross-site request forgery
csrf
automattic inc
crowdsignal dashboard
polls
surveys
CVSS3
5.4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L
AI Score
5.5
Confidence
High
EPSS
0
Percentile
9.0%
Cross-Site Request Forgery (CSRF) vulnerability in Automattic, Inc. Crowdsignal Dashboard – Polls, Surveys & more.This issue affects Crowdsignal Dashboard – Polls, Surveys & more: from n/a through 3.0.11.
Affected configurations
Node
automattic\,_inc.crowdsignal_dashboard_–_polls\,_surveys_\&_moreRange≤3.0.11wordpress
| Vendor | Product | Version | CPE |
|---|---|---|---|
| automattic\,_inc. | crowdsignal_dashboard_–_polls\,_surveys_\&_more | * | cpe:2.3:a:automattic\,_inc.:crowdsignal_dashboard_–_polls\,_surveys_\&_more:*:*:*:*:*:wordpress:*:* |
CNA Affected
[
{
"collectionURL": "https://wordpress.org/plugins",
"defaultStatus": "unaffected",
"packageName": "polldaddy",
"product": "Crowdsignal Dashboard – Polls, Surveys & more",
"vendor": "Automattic, Inc.",
"versions": [
{
"changes": [
{
"at": "3.1.0",
"status": "unaffected"
}
],
"lessThanOrEqual": "3.0.11",
"status": "affected",
"version": "n/a",
"versionType": "custom"
}
]
}
]Related
nvd
nvd
CVE-2023-51489
2024-03-16 01:15:49
wpvulndb
wpvulndb
Crowdsignal Dashboard < 3.1.0 - Rating Update via CSRF
2024-01-04 00:00:00
cvelist
cvelist
vulnrichment
vulnrichment
wordfence
wordfence
CVSS3
5.4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L
AI Score
5.5
Confidence
High
EPSS
0
Percentile
9.0%
Related for CVE-2023-51489