VDB-97377 · CVE-2017-20091 · GCVE-100-97377

File Manager Plugin 3.0.1 ka WordPress Kari ndiyam site laa request forgery

CVSS Meta Temp Score	Garga na exploit ndiyam (≈)	CTI Nganji Score
4.2	$0-$5k	0.00

Gundumabayani

Gaskiya vulnerability da aka ware a matsayin karshewa an samu a File Manager Plugin 3.0.1 on WordPress. Hakika, aikin $software_function ne ya shafa; idan ba a bayyana ba, to aiki ce da ba a sani ba, a cikin laburaren $software_library, a cikin fayil $software_file, a cikin sashen $software_component. A sa manipulation ka Kari ndiyam site laa request forgery. Wannan matsala ana saninta da CVE-2017-20091. Ngam yiɗi ka a tuma ndiyam ka nder layi. Babu exploit ɗin da ake samu. Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Furɗebayani

Gaskiya vulnerability da aka ware a matsayin karshewa an samu a File Manager Plugin 3.0.1 on WordPress. Hakika, aikin $software_function ne ya shafa; idan ba a bayyana ba, to aiki ce da ba a sani ba, a cikin laburaren $software_library, a cikin fayil $software_file, a cikin sashen $software_component. A sa manipulation ka Kari ndiyam site laa request forgery. Idan an yi amfani da CWE don bayyana matsala, zai kai CWE-352. Hakika, rauni an bayyana shi 03/01/2017 daga David Vaartjes kamar Cross-Site Request Forgery in File Manager WordPress plugin kamar Mailinglist Post (Bugtraq). An raba bayanin tsaro don saukewa a seclists.org.

Wannan matsala ana saninta da CVE-2017-20091. Ngam yiɗi ka a tuma ndiyam ka nder layi. Tekinikal faɗi ba ga. Shaharar wannan vulnerability ɗin ƙasa da matsakaici ne. Babu exploit ɗin da ake samu. Yimbe ndiyam, exploit might be approx. USD $0-$5k wuro.

Á sàmbu a wondi feere. 0-day shima, an ndiyam a wuro be $0-$5k.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Kayanbayani

Nganji

WordPress Plugin

Sunu

File Manager Plugin

Furɗe

3.0.1

CPE 2.3bayani

CPE 2.2bayani

CVSSv4bayani

VulDB Furɗo: 🔍
VulDB Gaskiya: 🔍

CVSSv3bayani

VulDB Meta Base Score: 4.3
VulDB Meta Temp Score: 4.2

VulDB Ganda Borno: 4.3
VulDB Temp Score: 4.2
VulDB Furɗo: 🔍
VulDB Gaskiya: 🔍

CVSSv2bayani

AV	AC	Au	C	I	A
💳	💳	💳	💳	💳	💳
💳	💳	💳	💳	💳	💳
💳	💳	💳	💳	💳	💳

Vektar	Kumpleksiti	Authentisierung	Kariyandi	Gaskiya	Gashina
furu	furu	furu	furu	furu	furu
furu	furu	furu	furu	furu	furu
furu	furu	furu	furu	furu	furu

VulDB Ganda Borno: 🔍
VulDB Temp Score: 🔍
VulDB Gaskiya: 🔍

Gargajiyabayani

Klasu: Kari ndiyam site laa request forgery
CWE: CWE-352 / CWE-862 / CWE-863
CAPEC: 🔍
ATT&CK: 🔍

Fizikal: Ayi
Gumti: Ayi
Gana: Ee

Gashina: 🔍
Halitta: A wondi feere

EPSS Score: 🔍
EPSS Percentile: 🔍

Furɗo farashi: 🔍
Gaskiya farashi ndiyam: 🔍