Lucene search

PatchstackCVE-2024-31362

HistoryApr 12, 2024 - 1:15 p.m.

CVE-2024-31362

2024-04-1213:15:20

CWE-352

Patchstack

web.nvd.nist.gov

csrf

metagauss profilegrid

version 5.7.8

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

AI Score

6.8

Confidence

Low

EPSS

Percentile

9.0%

JSON

Cross-Site Request Forgery (CSRF) vulnerability in Metagauss ProfileGrid.This issue affects ProfileGrid : from n/a through 5.7.8.

Affected configurations

Vulners

Node

metagaussprofilegridRange≤5.7.8wordpress

VendorProductVersionCPE
metagaussprofilegrid*cpe:2.3:a:metagauss:profilegrid:*:*:*:*:*:wordpress:*:*

Vendor	Product	Version	CPE
metagauss	profilegrid	*	cpe:2.3:a:metagauss:profilegrid::::::wordpress::*

CNA Affected

[
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "profilegrid-user-profiles-groups-and-communities",
    "product": "ProfileGrid ",
    "vendor": "Metagauss",
    "versions": [
      {
        "changes": [
          {
            "at": "5.7.9",
            "status": "unaffected"
          }
        ],
        "lessThanOrEqual": "5.7.8",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  }
]

References

patchstack.com/database/vulnerability/profilegrid-user-profiles-groups-and-communities/wordpress-profilegrid-user-profiles-memberships-groups-and-communities-plugin-5-7-8-cross-site-request-forgery-csrf-vulnerability?_s_id=cve

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

AI Score

6.8

Confidence

Low

EPSS

Percentile

9.0%

JSON

Related for CVE-2024-31362