Lucene search
PRIOn knowledge basePRION:CVE-2022-3119HistorySep 26, 2022 - 1:15 p.m.
Cross site request forgery (csrf)
2022-09-2613:15:00
PRIOn knowledge base
www.prio-n.com
2
oauth
sso
wordpress
plugin
authorization
csrf
attackers
endpoints
admin access
The OAuth client Single Sign On WordPress plugin before 3.0.4 does not have authorisation and CSRF when updating its settings, which could allow unauthenticated attackers to update them and change the OAuth endpoints to ones they controls, allowing them to then be authenticated as admin if they know the correct email address
| CPE | Name | Operator | Version |
|---|---|---|---|
| oauth_client_single_sign_on | lt | 3.0.4 |
Related
cve
cve
CVE-2022-3119
2022-09-26 13:15:11
cnvd
cnvd
nvd
nvd
CVE-2022-3119
2022-09-26 13:15:11
cvelist
cvelist
wpvulndb
wpvulndb
wpexploit
wpexploit