Lucene search

K
nvd[email protected]NVD:CVE-2023-22692
HistoryMay 22, 2023 - 9:15 a.m.

CVE-2023-22692

2023-05-2209:15:10
CWE-352
web.nvd.nist.gov
5
cross-site request forgery
jeroen peters name directory
csrf
1.27.1 versions

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

5.8

Confidence

High

EPSS

0.001

Percentile

32.7%

Cross-Site Request Forgery (CSRF) vulnerability in Jeroen Peters Name Directory plugin <= 1.27.1 versions.

Affected configurations

Nvd
Node
name_directory_projectname_directoryRange1.27.1wordpress
VendorProductVersionCPE
name_directory_projectname_directory*cpe:2.3:a:name_directory_project:name_directory:*:*:*:*:*:wordpress:*:*

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

5.8

Confidence

High

EPSS

0.001

Percentile

32.7%

Related for NVD:CVE-2023-22692