Lucene search

K

[email protected]NVD:CVE-2022-43504

HistoryDec 05, 2022 - 4:15 a.m.

CVE-2022-43504

2022-12-0504:15:10

CWE-287

[email protected]

web.nvd.nist.gov

wordpress

authentication

vulnerability

remote attacker

email address

patched release

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

0.002 Low

EPSS

Percentile

56.6%

Improper authentication vulnerability in WordPress versions prior to 6.0.3 allows a remote unauthenticated attacker to obtain the email address of the user who posted a blog using the WordPress Post by Email Feature. The developer also provides new patched releases for all versions since 3.7.

Affected configurations

NVD

Node

wordpresswordpressRange<3.7.40

OR

wordpresswordpressRange3.8–3.8.40

OR

wordpresswordpressRange3.9–3.9.39

OR

wordpresswordpressRange4.0–4.0.37

OR

wordpresswordpressRange4.1–4.1.37

OR

wordpresswordpressRange4.2–4.2.34

OR

wordpresswordpressRange4.3–4.3.30

OR

wordpresswordpressRange4.4–4.4.29

OR

wordpresswordpressRange4.5–4.5.28

OR

wordpresswordpressRange4.6–4.6.25

OR

wordpresswordpressRange4.7–4.7.25

OR

wordpresswordpressRange4.8–4.8.21

OR

wordpresswordpressRange4.9–4.9.22

OR

wordpresswordpressRange5.0–5.0.18

OR

wordpresswordpressRange5.1–5.1.15

OR

wordpresswordpressRange5.2–5.2.17

OR

wordpresswordpressRange5.3–5.3.14

OR

wordpresswordpressRange5.4–5.4.12

OR

wordpresswordpressRange5.5–5.5.11

OR

wordpresswordpressRange5.6–5.6.10

OR

wordpresswordpressRange5.7–5.7.8

OR

wordpresswordpressRange5.8–5.8.6

OR

wordpresswordpressRange5.9–5.9.5

OR

wordpresswordpressRange6.0–6.0.3

References

jvn.jp/en/jp/JVN09409909/index.html

wordpress.org/download/

wordpress.org/news/2022/10/wordpress-6-0-3-security-release/

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

0.002 Low

EPSS

Percentile

56.6%

Related for NVD:CVE-2022-43504

osv4 prion1 cvelist1 cve1 ubuntucve1 veracode1 debiancve1 openvas3 jvn1