exploitDog

CVE-2021-24832

Опубликовано: 08 нояб. 2021

Источник: nvd

CVSS3: 4.3

CVSS2: 4.3

EPSS Низкий

Описание

The WP SEO Redirect 301 WordPress plugin before 2.3.2 does not have CSRF in place when deleting redirects, which could allow attackers to make a logged in admin delete them via a CSRF attack

Ссылки

https://wpscan.com/vulnerability/cf031259-b76e-475c-8a8e-fa6a0d9e7bb4
Exploit
Third Party Advisory
https://wpscan.com/vulnerability/cf031259-b76e-475c-8a8e-fa6a0d9e7bb4
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:wp_seo_redirect_301_project:wp_seo_redirect_301:*:*:*:*:*:wordpress:*:*

Версия до 2.3.2 (исключая)

EPSS

Процентиль: 29%

0.00103

Низкий

4.3 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-352

CWE-352

Связанные уязвимости

GHSA-wmcw-73j7-m7xh

github

больше 3 лет назад

The WP SEO Redirect 301 WordPress plugin before 2.3.2 does not have CSRF in place when deleting redirects, which could allow attackers to make a logged in admin delete them via a CSRF attack

EPSS

Процентиль: 29%

0.00103

Низкий

4.3 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-352

CWE-352