Lucene search
PatchstackCVELIST:CVE-2023-36381HistoryDec 28, 2023 - 10:34 a.m.
CVE-2023-36381 WordPress Zippy Plugin <= 1.6.5 is vulnerable to PHP Object Injection
2023-12-2810:34:46
CWE-502
Patchstack
www.cve.org
wordpress zippy plugin
vulnerability
php object injection
deserialization
gesundheit bewegt gmbh
6.6 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L
8.9 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
20.6%
Deserialization of Untrusted Data vulnerability in Gesundheit Bewegt GmbH Zippy.This issue affects Zippy: from n/a through 1.6.5.
CNA Affected
[
{
"collectionURL": "https://wordpress.org/plugins",
"defaultStatus": "unaffected",
"packageName": "zippy",
"product": "Zippy",
"vendor": "Gesundheit Bewegt GmbH",
"versions": [
{
"changes": [
{
"at": "1.6.6",
"status": "unaffected"
}
],
"lessThanOrEqual": "1.6.5",
"status": "affected",
"version": "n/a",
"versionType": "custom"
}
]
}
]Related
cve
cve
CVE-2023-36381
2023-12-28 11:15:09
prion
prion
Deserialization of untrusted data
2023-12-28 11:15:00
nvd
nvd
CVE-2023-36381
2023-12-28 11:15:09
6.6 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L
8.9 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
20.6%
Related for CVELIST:CVE-2023-36381