CVE-2013-3257

Cross-site request forgery (CSRF) vulnerability in the Related Posts plugin before 2.7.2 for WordPress allows remote attackers to hijack the authentication of users for requests that modify settings via unspecified vectors.

CVSS v2.0 6.8 MEDIUM

6.8^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability : 8.6 / Impact : 6.4

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://secunia.com/advisories/53122
http://wordpress.org/plugins/related-posts/changelog/	Patch
http://www.securityfocus.com/bid/59836
https://exchange.xforce.ibmcloud.com/vulnerabilities/84245

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:zemanta:related_posts::::::wordpress::*
	cpe:2.3:a:zemanta:related_posts:1.0:::::wordpress::
	cpe:2.3:a:zemanta:related_posts:1.1:::::wordpress::
	cpe:2.3:a:zemanta:related_posts:1.2:::::wordpress::
	cpe:2.3:a:zemanta:related_posts:1.3:::::wordpress::
	cpe:2.3:a:zemanta:related_posts:1.3.1:::::wordpress::
	cpe:2.3:a:zemanta:related_posts:1.3.2:::::wordpress::
	cpe:2.3:a:zemanta:related_posts:1.3.3:::::wordpress::
	cpe:2.3:a:zemanta:related_posts:1.4:::::wordpress::
	cpe:2.3:a:zemanta:related_posts:1.5:::::wordpress::
	cpe:2.3:a:zemanta:related_posts:1.6:::::wordpress::
	cpe:2.3:a:zemanta:related_posts:1.7:::::wordpress::
	cpe:2.3:a:zemanta:related_posts:1.8:::::wordpress::
	cpe:2.3:a:zemanta:related_posts:1.8.1:::::wordpress::
	cpe:2.3:a:zemanta:related_posts:2.3:::::wordpress::
	cpe:2.3:a:zemanta:related_posts:2.4.1:::::wordpress::
	cpe:2.3:a:zemanta:related_posts:2.5.1:::::wordpress::
	cpe:2.3:a:zemanta:related_posts:2.6:::::wordpress::
	cpe:2.3:a:zemanta:related_posts:2.7:::::wordpress::

History

No history.

Information

Published : 2014-06-02 15:55

Updated : 2017-08-29 01:33

NVD link : CVE-2013-3257

Mitre link : CVE-2013-3257

CVE.ORG link : CVE-2013-3257

JSON object : View

Products Affected

zemanta

related_posts

CWE

CWE-352

Cross-Site Request Forgery (CSRF)

{"id": "CVE-2013-3257", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 6.8, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}]}, "published": "2014-06-02T15:55:10.200", "references": [{"url": "http://secunia.com/advisories/53122", "source": "PSIRT-CNA@flexerasoftware.com"}, {"url": "http://wordpress.org/plugins/related-posts/changelog/", "tags": ["Patch"], "source": "PSIRT-CNA@flexerasoftware.com"}, {"url": "http://www.securityfocus.com/bid/59836", "source": "PSIRT-CNA@flexerasoftware.com"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/84245", "source": "PSIRT-CNA@flexerasoftware.com"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-352"}]}], "descriptions": [{"lang": "en", "value": "Cross-site request forgery (CSRF) vulnerability in the Related Posts plugin before 2.7.2 for WordPress allows remote attackers to hijack the authentication of users for requests that modify settings via unspecified vectors."}, {"lang": "es", "value": "Vulnerabilidad de CSRF en el plugin Related Posts anterior a 2.7.2 para WordPress permite a atacantes remotos secuestrar la autenticaci\u00f3n de usuarios para solicitudes que modifican configuraciones a trav\u00e9s de vectores no especificados."}], "lastModified": "2017-08-29T01:33:22.217", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:zemanta:related_posts:*:*:*:*:*:wordpress:*:*", "vulnerable": true, "matchCriteriaId": "4A5EAE2B-D18C-4C81-8B47-39A0D13A41E0", "versionEndIncluding": "2.7.1"}, {"criteria": "cpe:2.3:a:zemanta:related_posts:1.0:*:*:*:*:wordpress:*:*", "vulnerable": true, "matchCriteriaId": "D7774D9E-549A-4240-B5DA-98EA0C06127B"}, {"criteria": "cpe:2.3:a:zemanta:related_posts:1.1:*:*:*:*:wordpress:*:*", "vulnerable": true, "matchCriteriaId": "71E49B56-6FF5-4668-AF0F-47CD3B1D0D6B"}, {"criteria": "cpe:2.3:a:zemanta:related_posts:1.2:*:*:*:*:wordpress:*:*", "vulnerable": true, "matchCriteriaId": "820277FA-4C3B-48CA-B19A-FB3914FE7D77"}, {"criteria": "cpe:2.3:a:zemanta:related_posts:1.3:*:*:*:*:wordpress:*:*", "vulnerable": true, "matchCriteriaId": "3AE14921-E43A-4BA4-8444-12F209E68929"}, {"criteria": "cpe:2.3:a:zemanta:related_posts:1.3.1:*:*:*:*:wordpress:*:*", "vulnerable": true, "matchCriteriaId": "8993E5FB-2E3A-4524-BD93-1F7092F11BCC"}, {"criteria": "cpe:2.3:a:zemanta:related_posts:1.3.2:*:*:*:*:wordpress:*:*", "vulnerable": true, "matchCriteriaId": "83DBBF6E-FE8C-4843-B390-C1AADFFD3AD3"}, {"criteria": "cpe:2.3:a:zemanta:related_posts:1.3.3:*:*:*:*:wordpress:*:*", "vulnerable": true, "matchCriteriaId": "D87740F4-03B5-42A4-B513-7BD866865588"}, {"criteria": "cpe:2.3:a:zemanta:related_posts:1.4:*:*:*:*:wordpress:*:*", "vulnerable": true, "matchCriteriaId": "5195FAC6-8F38-4D8E-893A-BE4B9FB93DCF"}, {"criteria": "cpe:2.3:a:zemanta:related_posts:1.5:*:*:*:*:wordpress:*:*", "vulnerable": true, "matchCriteriaId": "58A991EB-062F-4612-B2A5-FFF759928420"}, {"criteria": "cpe:2.3:a:zemanta:related_posts:1.6:*:*:*:*:wordpress:*:*", "vulnerable": true, "matchCriteriaId": "2A9AF413-90AC-4227-860A-8D657D09A53B"}, {"criteria": "cpe:2.3:a:zemanta:related_posts:1.7:*:*:*:*:wordpress:*:*", "vulnerable": true, "matchCriteriaId": "CBCDBB6D-9E00-4610-8A6B-A74E08D8043F"}, {"criteria": "cpe:2.3:a:zemanta:related_posts:1.8:*:*:*:*:wordpress:*:*", "vulnerable": true, "matchCriteriaId": "C32EA5B9-0FCB-4E60-8E7E-54729147AB33"}, {"criteria": "cpe:2.3:a:zemanta:related_posts:1.8.1:*:*:*:*:wordpress:*:*", "vulnerable": true, "matchCriteriaId": "401EEA87-DEE7-4ED9-B310-032C154D6C2A"}, {"criteria": "cpe:2.3:a:zemanta:related_posts:2.3:*:*:*:*:wordpress:*:*", "vulnerable": true, "matchCriteriaId": "8D654CF3-EECC-49A6-A8D8-C8FFCCC34AF7"}, {"criteria": "cpe:2.3:a:zemanta:related_posts:2.4.1:*:*:*:*:wordpress:*:*", "vulnerable": true, "matchCriteriaId": "18FE06DB-B338-4492-9FE8-DF225D2277DB"}, {"criteria": "cpe:2.3:a:zemanta:related_posts:2.5.1:*:*:*:*:wordpress:*:*", "vulnerable": true, "matchCriteriaId": "BC1FD22B-9CD6-40EB-8D36-473D60331DFD"}, {"criteria": "cpe:2.3:a:zemanta:related_posts:2.6:*:*:*:*:wordpress:*:*", "vulnerable": true, "matchCriteriaId": "02B55E20-E2D9-4341-9BF2-389B59BC0C23"}, {"criteria": "cpe:2.3:a:zemanta:related_posts:2.7:*:*:*:*:wordpress:*:*", "vulnerable": true, "matchCriteriaId": "0943DA33-D46D-45BC-815C-1715440F1067"}], "operator": "OR"}]}], "sourceIdentifier": "PSIRT-CNA@flexerasoftware.com"}