Lucene search

K
nvd[email protected]NVD:CVE-2024-35657
HistoryJun 08, 2024 - 4:15 p.m.

CVE-2024-35657

2024-06-0816:15:08
CWE-352
web.nvd.nist.gov
7
cross-site request forgery
csrf vulnerability
plechev andrey
wp-recall
versions 16.26.6
security issue

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L

EPSS

0

Percentile

9.0%

Cross-Site Request Forgery (CSRF) vulnerability in Plechev Andrey WP-Recall.This issue affects WP-Recall: from n/a through 16.26.6.

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L

EPSS

0

Percentile

9.0%

Related for NVD:CVE-2024-35657