Lucene search

K
patchstackRaphael GeissertPATCHSTACK:36C129832C5D073CCE81DC26F3C476D3
HistoryNov 17, 2008 - 12:00 a.m.

WordPress <= 2.6.3 - Cross Site Request Forgery

2008-11-1700:00:00
Raphael Geissert
patchstack.com
4

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:N/I:P/A:P

Because of this vulnerability, the attackers can conduct delayed and persistent cross-site request forgery attacks via crafted cookies.

Solution

           Update WordPress. 
CPENameOperatorVersion
wordpressle2.6.3

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:N/I:P/A:P

Related for PATCHSTACK:36C129832C5D073CCE81DC26F3C476D3