exploitDog

CVE-2021-20831

Опубликовано: 13 окт. 2021

Источник: nvd

CVSS3: 8.8

CVSS2: 6.8

EPSS Низкий

Описание

Cross-site request forgery (CSRF) vulnerability in OG Tags versions prior to 2.0.2 allows a remote attacker to hijack the authentication of administrators and unintended operation may be performed via unspecified vectors.

Ссылки

https://jvn.jp/en/jp/JVN29428319/index.html
Third Party Advisory
https://wordpress.org/plugins/og-tags/
Product
Third Party Advisory
https://jvn.jp/en/jp/JVN29428319/index.html
Third Party Advisory
https://wordpress.org/plugins/og-tags/
Product
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:og_tags_project:og_tags:*:*:*:*:*:wordpress:*:*

Версия до 2.0.2 (исключая)

EPSS

Процентиль: 33%

0.00128

Низкий

8.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-352

Связанные уязвимости

GHSA-w35x-3cc7-37pc

github

больше 3 лет назад

Cross-site request forgery (CSRF) vulnerability in OG Tags versions prior to 2.0.2 allows a remote attacker to hijack the authentication of administrators and unintended operation may be performed via unspecified vectors.

EPSS

Процентиль: 33%

0.00128

Низкий

8.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-352