2024-07-14 02:06:08 +00:00

114 lines
3.8 KiB
JSON

{
"id": "CVE-2020-11512",
"sourceIdentifier": "cve@mitre.org",
"published": "2020-04-07T17:15:13.527",
"lastModified": "2020-04-08T13:41:31.210",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Stored XSS in the IMPress for IDX Broker WordPress plugin before 2.6.2 allows authenticated attackers with minimal (subscriber-level) permissions to save arbitrary JavaScript in the plugin's settings panel via the idx_update_recaptcha_key AJAX action and a crafted idx_recaptcha_site_key parameter, which would then be executed in the browser of any administrator visiting the panel. This could be used to create new administrator-level accounts."
},
{
"lang": "es",
"value": "Una vulnerabilidad de tipo XSS almacenado en el plugin IMPress for IDX Broker WordPress versiones anteriores a 2.6.2, permite a atacantes autenticados con permisos m\u00ednimos (nivel suscriptor) guardar JavaScript arbitrario en el panel de configuraci\u00f3n del plugin por medio de la acci\u00f3n AJAX de idx_update_recaptcha_key y un par\u00e1metro idx_recaptcha_site_key dise\u00f1ado, que luego ser\u00eda ejecutado en el navegador de cualquier administrador que visite el panel. Esto podr\u00eda ser usado para crear nuevas cuentas de nivel administrador."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "nvd@nist.gov",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE",
"baseScore": 5.4,
"baseSeverity": "MEDIUM"
},
"exploitabilityScore": 2.3,
"impactScore": 2.7
}
],
"cvssMetricV2": [
{
"source": "nvd@nist.gov",
"type": "Primary",
"cvssData": {
"version": "2.0",
"vectorString": "AV:N/AC:M/Au:S/C:N/I:P/A:N",
"accessVector": "NETWORK",
"accessComplexity": "MEDIUM",
"authentication": "SINGLE",
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"availabilityImpact": "NONE",
"baseScore": 3.5
},
"baseSeverity": "LOW",
"exploitabilityScore": 6.8,
"impactScore": 2.9,
"acInsufInfo": false,
"obtainAllPrivilege": false,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": true
}
]
},
"weaknesses": [
{
"source": "nvd@nist.gov",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:idxbroker:impress_for_idx_broker:*:*:*:*:platinum:wordpress:*:*",
"versionEndExcluding": "2.6.2",
"matchCriteriaId": "237675F6-C86B-4716-8C12-DE0F21159E7D"
}
]
}
]
}
],
"references": [
{
"url": "https://wordpress.org/plugins/idx-broker-platinum/#developers",
"source": "cve@mitre.org",
"tags": [
"Product"
]
},
{
"url": "https://www.wordfence.com/blog/2020/03/vulnerabilities-patched-in-impress-for-idx-broker/",
"source": "cve@mitre.org",
"tags": [
"Exploit",
"Third Party Advisory"
]
}
]
}