CVE-2013-3253

Опубликовано: 09 авг. 2013

Источник: nvd

CVSS2: 6.8

EPSS Низкий

Описание

Cross-site request forgery (CSRF) vulnerability in admin/setting.php in the Xhanch - My Twitter plugin before 2.7.7 for WordPress allows remote attackers to hijack the authentication of administrators for requests that change unspecified settings.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одновременно

Одно из

cpe:2.3:a:xhanch:my_twitter:*:*:*:*:*:wordpress:*:*

Версия до 2.7.6 (включая)

cpe:2.3:a:xhanch:my_twitter:2.5.8:*:*:*:*:wordpress:*:*

cpe:2.3:a:xhanch:my_twitter:2.5.9:*:*:*:*:wordpress:*:*

cpe:2.3:a:xhanch:my_twitter:2.6.0:*:*:*:*:wordpress:*:*

cpe:2.3:a:xhanch:my_twitter:2.6.1:*:*:*:*:wordpress:*:*

cpe:2.3:a:xhanch:my_twitter:2.6.2:*:*:*:*:wordpress:*:*

cpe:2.3:a:xhanch:my_twitter:2.6.3:*:*:*:*:wordpress:*:*

cpe:2.3:a:xhanch:my_twitter:2.6.4:*:*:*:*:wordpress:*:*

cpe:2.3:a:xhanch:my_twitter:2.6.5:*:*:*:*:wordpress:*:*

cpe:2.3:a:xhanch:my_twitter:2.6.6:*:*:*:*:wordpress:*:*

cpe:2.3:a:xhanch:my_twitter:2.6.7:*:*:*:*:wordpress:*:*

cpe:2.3:a:xhanch:my_twitter:2.6.8:*:*:*:*:wordpress:*:*

cpe:2.3:a:xhanch:my_twitter:2.6.9:*:*:*:*:wordpress:*:*

cpe:2.3:a:xhanch:my_twitter:2.7.0:*:*:*:*:wordpress:*:*

cpe:2.3:a:xhanch:my_twitter:2.7.1:*:*:*:*:wordpress:*:*

cpe:2.3:a:xhanch:my_twitter:2.7.2:*:*:*:*:wordpress:*:*

cpe:2.3:a:xhanch:my_twitter:2.7.3:*:*:*:*:wordpress:*:*

cpe:2.3:a:xhanch:my_twitter:2.7.4:*:*:*:*:wordpress:*:*

cpe:2.3:a:xhanch:my_twitter:2.7.5:*:*:*:*:wordpress:*:*

cpe:2.3:a:wordpress:wordpress:-:*:*:*:*:*:*:*

EPSS

Процентиль: 48%

0.00251

Низкий

6.8 Medium

CVSS2

Дефекты

CWE-352

Связанные уязвимости

GHSA-wwm8-q7mj-x5mp

github

около 3 лет назад