2023-11-14 22:00:37 +00:00
|
|
|
{
|
2023-12-07 12:00:33 +00:00
|
|
|
"data_version": "4.0",
|
2023-11-14 22:00:37 +00:00
|
|
|
"data_type": "CVE",
|
|
|
|
|
"data_format": "MITRE",
|
|
|
|
|
"CVE_data_meta": {
|
|
|
|
|
"ID": "CVE-2023-48325",
|
2023-12-07 12:00:33 +00:00
|
|
|
"ASSIGNER": "audit@patchstack.com",
|
|
|
|
|
"STATE": "PUBLIC"
|
2023-11-14 22:00:37 +00:00
|
|
|
},
|
|
|
|
|
"description": {
|
|
|
|
|
"description_data": [
|
|
|
|
|
{
|
|
|
|
|
"lang": "eng",
|
2023-12-07 12:00:33 +00:00
|
|
|
"value": "URL Redirection to Untrusted Site ('Open Redirect') vulnerability in PluginOps Landing Page Builder \u2013 Lead Page \u2013 Optin Page \u2013 Squeeze Page \u2013 WordPress Landing Pages.This issue affects Landing Page Builder \u2013 Lead Page \u2013 Optin Page \u2013 Squeeze Page \u2013 WordPress Landing Pages: from n/a through 1.5.1.5.\n\n"
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
"problemtype": {
|
|
|
|
|
"problemtype_data": [
|
|
|
|
|
{
|
|
|
|
|
"description": [
|
|
|
|
|
{
|
|
|
|
|
"lang": "eng",
|
|
|
|
|
"value": "CWE-601 URL Redirection to Untrusted Site ('Open Redirect')",
|
|
|
|
|
"cweId": "CWE-601"
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
"affects": {
|
|
|
|
|
"vendor": {
|
|
|
|
|
"vendor_data": [
|
|
|
|
|
{
|
|
|
|
|
"vendor_name": "PluginOps",
|
|
|
|
|
"product": {
|
|
|
|
|
"product_data": [
|
|
|
|
|
{
|
|
|
|
|
"product_name": "Landing Page Builder \u2013 Lead Page \u2013 Optin Page \u2013 Squeeze Page \u2013 WordPress Landing Pages",
|
|
|
|
|
"version": {
|
|
|
|
|
"version_data": [
|
|
|
|
|
{
|
|
|
|
|
"version_value": "not down converted",
|
|
|
|
|
"x_cve_json_5_version_data": {
|
|
|
|
|
"versions": [
|
|
|
|
|
{
|
|
|
|
|
"changes": [
|
|
|
|
|
{
|
|
|
|
|
"at": "1.5.1.6",
|
|
|
|
|
"status": "unaffected"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"lessThanOrEqual": "1.5.1.5",
|
|
|
|
|
"status": "affected",
|
|
|
|
|
"version": "n/a",
|
|
|
|
|
"versionType": "custom"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"defaultStatus": "unaffected"
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
}
|
|
|
|
|
},
|
|
|
|
|
"references": {
|
|
|
|
|
"reference_data": [
|
|
|
|
|
{
|
|
|
|
|
"url": "https://patchstack.com/database/vulnerability/page-builder-add/wordpress-landing-page-builder-plugin-1-5-1-5-open-redirection-vulnerability?_s_id=cve",
|
|
|
|
|
"refsource": "MISC",
|
|
|
|
|
"name": "https://patchstack.com/database/vulnerability/page-builder-add/wordpress-landing-page-builder-plugin-1-5-1-5-open-redirection-vulnerability?_s_id=cve"
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
"generator": {
|
|
|
|
|
"engine": "Vulnogram 0.1.0-dev"
|
|
|
|
|
},
|
|
|
|
|
"source": {
|
|
|
|
|
"discovery": "EXTERNAL"
|
|
|
|
|
},
|
|
|
|
|
"solution": [
|
|
|
|
|
{
|
|
|
|
|
"lang": "en",
|
|
|
|
|
"supportingMedia": [
|
|
|
|
|
{
|
|
|
|
|
"base64": false,
|
|
|
|
|
"type": "text/html",
|
|
|
|
|
"value": "Update to 1.5.1.6 or a higher version."
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"value": "Update to\u00a01.5.1.6 or a higher version."
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"credits": [
|
|
|
|
|
{
|
|
|
|
|
"lang": "en",
|
|
|
|
|
"value": "minhtuanact (Patchstack Alliance)"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"impact": {
|
|
|
|
|
"cvss": [
|
|
|
|
|
{
|
|
|
|
|
"attackComplexity": "LOW",
|
|
|
|
|
"attackVector": "NETWORK",
|
|
|
|
|
"availabilityImpact": "NONE",
|
|
|
|
|
"baseScore": 4.7,
|
|
|
|
|
"baseSeverity": "MEDIUM",
|
|
|
|
|
"confidentialityImpact": "LOW",
|
|
|
|
|
"integrityImpact": "NONE",
|
|
|
|
|
"privilegesRequired": "NONE",
|
|
|
|
|
"scope": "CHANGED",
|
|
|
|
|
"userInteraction": "REQUIRED",
|
|
|
|
|
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N",
|
|
|
|
|
"version": "3.1"
|
2023-11-14 22:00:37 +00:00
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
}
|
|
|
|
|
}
|
