Описание
Cross-site request forgery (CSRF) vulnerability in TS Webfonts for SAKURA 3.1.2 and earlier allows a remote unauthenticated attacker to hijack the authentication of a user and to change settings by having a user view a malicious page.
Ссылки
- ProductRelease Notes
- Third Party Advisory
- ProductRelease Notes
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 3.1.2 (включая)
cpe:2.3:a:sakura:ts_webfonts:*:*:*:*:*:wordpress:*:*
EPSS
Процентиль: 32%
0.00124
Низкий
4.3 Medium
CVSS3
Дефекты
CWE-352
Связанные уязвимости
CVSS3: 4.3
github
больше 2 лет назад
Cross-site request forgery (CSRF) vulnerability in TS Webfonts for SAKURA 3.1.2 and earlier allows a remote unauthenticated attacker to hijack the authentication of a user and to change settings by having a user view a malicious page.
EPSS
Процентиль: 32%
0.00124
Низкий
4.3 Medium
CVSS3
Дефекты
CWE-352