Lucene search
HistoryNov 30, 2023 - 2:15 p.m.
CVE-2023-37867
cve-2023-37867
toctou
yetanotherstarsrating.com yasr
wordpress
vulnerability
8.1 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
0.001 Low
EPSS
Percentile
39.3%
Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in YetAnotherStarsRating.Com YASR – Yet Another Star Rating Plugin for WordPress.This issue affects YASR – Yet Another Star Rating Plugin for WordPress: from n/a through 3.3.8.
Affected configurations
Node
yet_another_stars_rating_projectyet_another_stars_ratingRange<3.3.9wordpress
Related
cve
cve
CVE-2023-37867
2023-11-30 14:15:09
prion
prion
Race condition
2023-11-30 14:15:00
cvelist
cvelist
8.1 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
0.001 Low
EPSS
Percentile
39.3%
Related for NVD:CVE-2023-37867