Lucene search
HistoryJun 05, 2024 - 2:15 p.m.
CVE-2024-35673
cross-site request forgery
pure chat
ruby
vulnerability
cve-2024-35673
4.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
4.6 Medium
AI Score
Confidence
High
0.0005 Low
EPSS
Percentile
17.0%
Cross-Site Request Forgery (CSRF) vulnerability in Pure Chat by Ruby Pure Chat.This issue affects Pure Chat: from n/a through 2.22.
Affected configurations
Node
purechatpure_chatRange<2.3
Related
wpvulndb
wpvulndb
Pure Chat – Live Chat Plugin & More! < 2.23 - Cross-Site Request Forgery
2024-06-06 00:00:00
vulnrichment
vulnrichment
cve
cve
CVE-2024-35673
2024-06-05 14:15:13
cvelist
cvelist
wordfence
wordfence
4.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
4.6 Medium
AI Score
Confidence
High
0.0005 Low
EPSS
Percentile
17.0%
Related for NVD:CVE-2024-35673