Lucene search

K
nvd[email protected]NVD:CVE-2023-41684
HistoryOct 10, 2023 - 7:15 a.m.

CVE-2023-41684

2023-10-1007:15:11
CWE-352
web.nvd.nist.gov
1
cve-2023-41684
cross-site request forgery
felix welberg sis handball plugin

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

5.8

Confidence

High

EPSS

0.001

Percentile

24.1%

Cross-Site Request Forgery (CSRF) vulnerability in Felix Welberg SIS Handball plugin <= 1.0.45 versions.

Affected configurations

Nvd
Node
felixwelbergsis_handballRange1.0.45wordpress
VendorProductVersionCPE
felixwelbergsis_handball*cpe:2.3:a:felixwelberg:sis_handball:*:*:*:*:*:wordpress:*:*

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

5.8

Confidence

High

EPSS

0.001

Percentile

24.1%