Lucene search

MikaPATCHSTACK:9CA5EA330DD7017C68FE32A576386885

HistoryDec 22, 2023 - 12:00 a.m.

WordPress HUSKY Plugin <= 1.3.4.3 is vulnerable to Cross Site Request Forgery (CSRF)

2023-12-2200:00:00

Mika

patchstack.com

wordpress

husky plugin

cross site request forgery

cve-2023-50861

low severity

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

AI Score

6.6

Confidence

High

JSON

Software

HUSKY

Type

Plugin

Vulnerable versions

<= 1.3.4.3

Fixed in

1.3.4.4

OWASP Top 10

A1: Broken Access Control

Classification

Cross Site Request Forgery (CSRF)

CVE

CVE-2023-50861

Patch priority

Low

CVSS severity

Low (4.3)

Developer

Claim ownership

PSID

156ef288eb83

Credits

Mika Mika

Required privilege

Unauthenticated

Published

22 December, 2023

Expand full details Have additional information or questions about this entry? Let us know.

Solution

This security issue has a low severity impact and is unlikely to be exploited.

Affected configurations

Vulners

Node

realmag777huskyRange≤1.3.4.3

VendorProductVersionCPE
realmag777husky*cpe:2.3:a:realmag777:husky:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
realmag777	husky	*	cpe:2.3:a:realmag777:husky::::::::

References

wordpress.org/plugins/woocommerce-products-filter/#developers

www.cve.org/CVERecord?id=CVE-2023-50861

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

AI Score

6.6

Confidence

High

JSON

Related for PATCHSTACK:9CA5EA330DD7017C68FE32A576386885