Lucene search
PRIOn knowledge basePRION:CVE-2023-1093HistoryMar 27, 2023 - 4:15 p.m.
Cross site request forgery (csrf)
2023-03-2716:15:00
PRIOn knowledge base
www.prio-n.com
2
oauth
csrf
identify providers
admin deletion
attack
The OAuth Single Sign On WordPress plugin before 6.24.2 does not have CSRF checks when discarding Identify providers (IdP), which could allow attackers to make logged in admins delete all IdP via a CSRF attack
| CPE | Name | Operator | Version |
|---|---|---|---|
| oauth_single_sign_on | lt | 6.24.2 |
Related
cvelist
cvelist
cve
cve
CVE-2023-1093
2023-03-27 16:15:09
nvd
nvd
CVE-2023-1093
2023-03-27 16:15:09
wpvulndb
wpvulndb
OAuth Single Sign On - SSO (OAuth Client) < 6.24.2 - IdP Discard via CSRF
2023-02-28 00:00:00
wpexploit
wpexploit
OAuth Single Sign On - SSO (OAuth Client) < 6.24.2 - IdP Discard via CSRF
2023-02-28 00:00:00