CVE-2014-5034

Опубликовано: 06 апр. 2018

Источник: nvd

CVSS3: 8.8

CVSS2: 6.8

EPSS Низкий

Описание

Cross-site request forgery (CSRF) vulnerability in the Brute Force Login Protection module 1.3 for WordPress allows remote attackers to hijack the authentication of unspecified users for requests that have unknown impact via a crafted request to the brute-force-login-protection page to wp-admin/options-general.php.

Ссылки

https://github.com/0pc0deFR/Exploits/blob/master/CVE-2014-5034/exploit.html
Exploit
Third Party Advisory
https://github.com/0pc0deFR/wordpress-sploit-framework/blob/master/exploits/Brute_Force_Login_Protection_1_3_Cross_Site_Request_Forgery
Exploit
Third Party Advisory
https://github.com/0pc0deFR/Exploits/blob/master/CVE-2014-5034/exploit.html
Exploit
Third Party Advisory
https://github.com/0pc0deFR/wordpress-sploit-framework/blob/master/exploits/Brute_Force_Login_Protection_1_3_Cross_Site_Request_Forgery
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:fresh-media:brute_force_login_protection:1.3:*:*:*:*:wordpress:*:*

EPSS

Процентиль: 33%

0.0013

Низкий

8.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-352

Связанные уязвимости

GHSA-7738-8522-wqf9