mirror of
https://github.com/CVEProject/cvelist.git
synced 2025-05-07 11:06:39 +00:00
"-Synchronized-Data."
This commit is contained in:
CVE Team
parent
1c0498a2f6
commit
063bf03d1c
@ -1,18 +1,99 @@
|
||||
{
|
||||
"data_type": "CVE",
|
||||
"data_format": "MITRE",
|
||||
"data_version": "4.0",
|
||||
"CVE_data_meta": {
|
||||
"ASSIGNER": "audit@patchstack.com",
|
||||
"DATE_PUBLIC": "2022-09-21T12:53:00.000Z",
|
||||
"ID": "CVE-2022-40219",
|
||||
"ASSIGNER": "cve@mitre.org",
|
||||
"STATE": "RESERVED"
|
||||
"STATE": "PUBLIC",
|
||||
"TITLE": "WordPress FavIcon Switcher plugin <= 1.2.11 - Cross-Site Request Forgery (CSRF) vulnerability"
|
||||
},
|
||||
"affects": {
|
||||
"vendor": {
|
||||
"vendor_data": [
|
||||
{
|
||||
"product": {
|
||||
"product_data": [
|
||||
{
|
||||
"product_name": "FavIcon Switcher (WordPress plugin)",
|
||||
"version": {
|
||||
"version_data": [
|
||||
{
|
||||
"version_affected": "<=",
|
||||
"version_name": "<= 1.2.11",
|
||||
"version_value": "1.2.11"
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
]
|
||||
},
|
||||
"vendor_name": "SedLex"
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"credit": [
|
||||
{
|
||||
"lang": "eng",
|
||||
"value": "Vulnerability discovered by Lana Codes (Patchstack Alliance)"
|
||||
}
|
||||
],
|
||||
"data_format": "MITRE",
|
||||
"data_type": "CVE",
|
||||
"data_version": "4.0",
|
||||
"description": {
|
||||
"description_data": [
|
||||
{
|
||||
"lang": "eng",
|
||||
"value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
|
||||
"value": "Cross-Site Request Forgery (CSRF) vulnerability in SedLex FavIcon Switcher plugin <= 1.2.11 at WordPress allows plugin settings change."
|
||||
}
|
||||
]
|
||||
},
|
||||
"generator": {
|
||||
"engine": "Vulnogram 0.0.9"
|
||||
},
|
||||
"impact": {
|
||||
"cvss": {
|
||||
"attackComplexity": "LOW",
|
||||
"attackVector": "NETWORK",
|
||||
"availabilityImpact": "LOW",
|
||||
"baseScore": 5.4,
|
||||
"baseSeverity": "MEDIUM",
|
||||
"confidentialityImpact": "NONE",
|
||||
"integrityImpact": "LOW",
|
||||
"privilegesRequired": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"userInteraction": "REQUIRED",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L",
|
||||
"version": "3.1"
|
||||
}
|
||||
},
|
||||
"problemtype": {
|
||||
"problemtype_data": [
|
||||
{
|
||||
"description": [
|
||||
{
|
||||
"lang": "eng",
|
||||
"value": "CWE-352 Cross-Site Request Forgery (CSRF)"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"references": {
|
||||
"reference_data": [
|
||||
{
|
||||
"name": "https://patchstack.com/database/vulnerability/favicon-switcher/wordpress-favicon-switcher-plugin-1-2-11-cross-site-request-forgery-csrf-vulnerability",
|
||||
"refsource": "CONFIRM",
|
||||
"url": "https://patchstack.com/database/vulnerability/favicon-switcher/wordpress-favicon-switcher-plugin-1-2-11-cross-site-request-forgery-csrf-vulnerability"
|
||||
},
|
||||
{
|
||||
"name": "https://wordpress.org/plugins/favicon-switcher/",
|
||||
"refsource": "CONFIRM",
|
||||
"url": "https://wordpress.org/plugins/favicon-switcher/"
|
||||
}
|
||||
]
|
||||
},
|
||||
"source": {
|
||||
"discovery": "EXTERNAL"
|
||||
}
|
||||
}
|
||||
@ -61,11 +61,6 @@
|
||||
"name": "https://www.jenkins.io/security/advisory/2022-09-21/#SECURITY-2051",
|
||||
"url": "https://www.jenkins.io/security/advisory/2022-09-21/#SECURITY-2051",
|
||||
"refsource": "CONFIRM"
|
||||
},
|
||||
{
|
||||
"refsource": "MLIST",
|
||||
"name": "[oss-security] 20220921 Multiple vulnerabilities in Jenkins and Jenkins plugins",
|
||||
"url": "http://www.openwall.com/lists/oss-security/2022/09/21/5"
|
||||
}
|
||||
]
|
||||
}
|
||||
|
||||
@ -61,11 +61,6 @@
|
||||
"name": "https://www.jenkins.io/security/advisory/2022-09-21/#SECURITY-1737",
|
||||
"url": "https://www.jenkins.io/security/advisory/2022-09-21/#SECURITY-1737",
|
||||
"refsource": "CONFIRM"
|
||||
},
|
||||
{
|
||||
"refsource": "MLIST",
|
||||
"name": "[oss-security] 20220921 Multiple vulnerabilities in Jenkins and Jenkins plugins",
|
||||
"url": "http://www.openwall.com/lists/oss-security/2022/09/21/5"
|
||||
}
|
||||
]
|
||||
}
|
||||
|
||||
@ -61,11 +61,6 @@
|
||||
"name": "https://www.jenkins.io/security/advisory/2022-09-21/#SECURITY-2867",
|
||||
"url": "https://www.jenkins.io/security/advisory/2022-09-21/#SECURITY-2867",
|
||||
"refsource": "CONFIRM"
|
||||
},
|
||||
{
|
||||
"refsource": "MLIST",
|
||||
"name": "[oss-security] 20220921 Multiple vulnerabilities in Jenkins and Jenkins plugins",
|
||||
"url": "http://www.openwall.com/lists/oss-security/2022/09/21/5"
|
||||
}
|
||||
]
|
||||
}
|
||||
|
||||
@ -61,11 +61,6 @@
|
||||
"name": "https://www.jenkins.io/security/advisory/2022-09-21/#SECURITY-2884",
|
||||
"url": "https://www.jenkins.io/security/advisory/2022-09-21/#SECURITY-2884",
|
||||
"refsource": "CONFIRM"
|
||||
},
|
||||
{
|
||||
"refsource": "MLIST",
|
||||
"name": "[oss-security] 20220921 Multiple vulnerabilities in Jenkins and Jenkins plugins",
|
||||
"url": "http://www.openwall.com/lists/oss-security/2022/09/21/5"
|
||||
}
|
||||
]
|
||||
}
|
||||
|
||||
@ -61,11 +61,6 @@
|
||||
"name": "https://www.jenkins.io/security/advisory/2022-09-21/#SECURITY-1870",
|
||||
"url": "https://www.jenkins.io/security/advisory/2022-09-21/#SECURITY-1870",
|
||||
"refsource": "CONFIRM"
|
||||
},
|
||||
{
|
||||
"refsource": "MLIST",
|
||||
"name": "[oss-security] 20220921 Multiple vulnerabilities in Jenkins and Jenkins plugins",
|
||||
"url": "http://www.openwall.com/lists/oss-security/2022/09/21/5"
|
||||
}
|
||||
]
|
||||
}
|
||||
|
||||
@ -61,11 +61,6 @@
|
||||
"name": "https://www.jenkins.io/security/advisory/2022-09-21/#SECURITY-2805",
|
||||
"url": "https://www.jenkins.io/security/advisory/2022-09-21/#SECURITY-2805",
|
||||
"refsource": "CONFIRM"
|
||||
},
|
||||
{
|
||||
"refsource": "MLIST",
|
||||
"name": "[oss-security] 20220921 Multiple vulnerabilities in Jenkins and Jenkins plugins",
|
||||
"url": "http://www.openwall.com/lists/oss-security/2022/09/21/5"
|
||||
}
|
||||
]
|
||||
}
|
||||
|
||||
@ -61,11 +61,6 @@
|
||||
"name": "https://www.jenkins.io/security/advisory/2022-09-21/#SECURITY-2001",
|
||||
"url": "https://www.jenkins.io/security/advisory/2022-09-21/#SECURITY-2001",
|
||||
"refsource": "CONFIRM"
|
||||
},
|
||||
{
|
||||
"refsource": "MLIST",
|
||||
"name": "[oss-security] 20220921 Multiple vulnerabilities in Jenkins and Jenkins plugins",
|
||||
"url": "http://www.openwall.com/lists/oss-security/2022/09/21/5"
|
||||
}
|
||||
]
|
||||
}
|
||||
|
||||
@ -61,11 +61,6 @@
|
||||
"name": "https://www.jenkins.io/security/advisory/2022-09-21/#SECURITY-2068",
|
||||
"url": "https://www.jenkins.io/security/advisory/2022-09-21/#SECURITY-2068",
|
||||
"refsource": "CONFIRM"
|
||||
},
|
||||
{
|
||||
"refsource": "MLIST",
|
||||
"name": "[oss-security] 20220921 Multiple vulnerabilities in Jenkins and Jenkins plugins",
|
||||
"url": "http://www.openwall.com/lists/oss-security/2022/09/21/5"
|
||||
}
|
||||
]
|
||||
}
|
||||
|
||||
@ -61,11 +61,6 @@
|
||||
"name": "https://www.jenkins.io/security/advisory/2022-09-21/#SECURITY-2069",
|
||||
"url": "https://www.jenkins.io/security/advisory/2022-09-21/#SECURITY-2069",
|
||||
"refsource": "CONFIRM"
|
||||
},
|
||||
{
|
||||
"refsource": "MLIST",
|
||||
"name": "[oss-security] 20220921 Multiple vulnerabilities in Jenkins and Jenkins plugins",
|
||||
"url": "http://www.openwall.com/lists/oss-security/2022/09/21/5"
|
||||
}
|
||||
]
|
||||
}
|
||||
|
||||
@ -61,11 +61,6 @@
|
||||
"name": "https://www.jenkins.io/security/advisory/2022-09-21/#SECURITY-2237",
|
||||
"url": "https://www.jenkins.io/security/advisory/2022-09-21/#SECURITY-2237",
|
||||
"refsource": "CONFIRM"
|
||||
},
|
||||
{
|
||||
"refsource": "MLIST",
|
||||
"name": "[oss-security] 20220921 Multiple vulnerabilities in Jenkins and Jenkins plugins",
|
||||
"url": "http://www.openwall.com/lists/oss-security/2022/09/21/5"
|
||||
}
|
||||
]
|
||||
}
|
||||
|
||||
@ -61,11 +61,6 @@
|
||||
"name": "https://www.jenkins.io/security/advisory/2022-09-21/#SECURITY-2237",
|
||||
"url": "https://www.jenkins.io/security/advisory/2022-09-21/#SECURITY-2237",
|
||||
"refsource": "CONFIRM"
|
||||
},
|
||||
{
|
||||
"refsource": "MLIST",
|
||||
"name": "[oss-security] 20220921 Multiple vulnerabilities in Jenkins and Jenkins plugins",
|
||||
"url": "http://www.openwall.com/lists/oss-security/2022/09/21/5"
|
||||
}
|
||||
]
|
||||
}
|
||||
|
||||
@ -61,11 +61,6 @@
|
||||
"name": "https://www.jenkins.io/security/advisory/2022-09-21/#SECURITY-2243",
|
||||
"url": "https://www.jenkins.io/security/advisory/2022-09-21/#SECURITY-2243",
|
||||
"refsource": "CONFIRM"
|
||||
},
|
||||
{
|
||||
"refsource": "MLIST",
|
||||
"name": "[oss-security] 20220921 Multiple vulnerabilities in Jenkins and Jenkins plugins",
|
||||
"url": "http://www.openwall.com/lists/oss-security/2022/09/21/5"
|
||||
}
|
||||
]
|
||||
}
|
||||
|
||||
Loading…
x
Reference in New Issue
Block a user