Lucene search
VulDBCVELIST:CVE-2017-20093HistoryJun 24, 2022 - 6:45 a.m.
CVE-2017-20093 Download Manager Plugin cross-site request forgery
2022-06-2406:45:28
CWE-352
VulDB
www.cve.org
5
cve-2017-20093
cross-site request forgery
remote attack
download manager plugin
CVSS3
4.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
AI Score
4.7
Confidence
High
EPSS
0.001
Percentile
30.0%
A vulnerability, which was classified as problematic, was found in Download Manager Plugin 2.8.99. Affected is an unknown function. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely.
CNA Affected
[
{
"product": "Download Manager Plugin",
"vendor": "unspecified",
"versions": [
{
"status": "affected",
"version": "2.8.99"
}
]
}
]Related
prion
prion
Cross site request forgery (csrf)
2022-06-24 07:15:00
cnvd
cnvd
WordPress Plugin Download Manager Cross-Site Request Forgery Vulnerability
2022-06-27 00:00:00
cve
cve
CVE-2017-20093
2022-06-24 07:15:07
nvd
nvd
CVE-2017-20093
2022-06-24 07:15:07
CVSS3
4.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
AI Score
4.7
Confidence
High
EPSS
0.001
Percentile
30.0%
Related for CVELIST:CVE-2017-20093