CVE-2013-3476

Cross-site request forgery (CSRF) vulnerability in the WordPress Related Posts plugin before 2.6.2 for WordPress allows remote attackers to hijack the authentication of users for requests that change settings via unspecified vectors.

CVSS v2.0 6.8 MEDIUM

6.8^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability : 8.6 / Impact : 6.4

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://secunia.com/advisories/53279
http://wordpress.org/plugins/wordpress-23-related-posts-plugin/changelog/	Patch
http://www.securityfocus.com/bid/59839
https://exchange.xforce.ibmcloud.com/vulnerabilities/84247

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:zemanta:related_posts::::::wordpress::*
	cpe:2.3:a:zemanta:related_posts:1.0:::::wordpress::
	cpe:2.3:a:zemanta:related_posts:1.1:::::wordpress::
	cpe:2.3:a:zemanta:related_posts:1.2:::::wordpress::
	cpe:2.3:a:zemanta:related_posts:1.3:::::wordpress::
	cpe:2.3:a:zemanta:related_posts:1.3.1:::::wordpress::
	cpe:2.3:a:zemanta:related_posts:1.3.2:::::wordpress::
	cpe:2.3:a:zemanta:related_posts:1.3.3:::::wordpress::
	cpe:2.3:a:zemanta:related_posts:1.4:::::wordpress::
	cpe:2.3:a:zemanta:related_posts:1.5:::::wordpress::
	cpe:2.3:a:zemanta:related_posts:1.6:::::wordpress::
	cpe:2.3:a:zemanta:related_posts:1.7:::::wordpress::
	cpe:2.3:a:zemanta:related_posts:1.8:::::wordpress::
	cpe:2.3:a:zemanta:related_posts:1.8.1:::::wordpress::
	cpe:2.3:a:zemanta:related_posts:2.3:::::wordpress::
	cpe:2.3:a:zemanta:related_posts:2.4.1:::::wordpress::
	cpe:2.3:a:zemanta:related_posts:2.5.1:::::wordpress::

History

No history.

Information

Published : 2014-06-02 15:55

Updated : 2017-08-29 01:33

NVD link : CVE-2013-3476

Mitre link : CVE-2013-3476

CVE.ORG link : CVE-2013-3476

JSON object : View

Products Affected

zemanta

related_posts

CWE

CWE-352

Cross-Site Request Forgery (CSRF)

{"id": "CVE-2013-3476", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 6.8, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}]}, "published": "2014-06-02T15:55:10.340", "references": [{"url": "http://secunia.com/advisories/53279", "source": "PSIRT-CNA@flexerasoftware.com"}, {"url": "http://wordpress.org/plugins/wordpress-23-related-posts-plugin/changelog/", "tags": ["Patch"], "source": "PSIRT-CNA@flexerasoftware.com"}, {"url": "http://www.securityfocus.com/bid/59839", "source": "PSIRT-CNA@flexerasoftware.com"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/84247", "source": "PSIRT-CNA@flexerasoftware.com"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-352"}]}], "descriptions": [{"lang": "en", "value": "Cross-site request forgery (CSRF) vulnerability in the WordPress Related Posts plugin before 2.6.2 for WordPress allows remote attackers to hijack the authentication of users for requests that change settings via unspecified vectors."}, {"lang": "es", "value": "Vulnerabilidad de CSRF en el plugin WordPress Related Posts anterior a 2.6.2 para WordPress permite a atacantes remotos secuestrar la autenticaci\u00f3n de usuarios para solicitudes que cambian configuraciones a trav\u00e9s de vectores no especificados."}], "lastModified": "2017-08-29T01:33:23.903", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:zemanta:related_posts:*:*:*:*:*:wordpress:*:*", "vulnerable": true, "matchCriteriaId": "230306E9-EFAE-40F6-ADFA-824E75802F11", "versionEndIncluding": "2.6"}, {"criteria": "cpe:2.3:a:zemanta:related_posts:1.0:*:*:*:*:wordpress:*:*", "vulnerable": true, "matchCriteriaId": "D7774D9E-549A-4240-B5DA-98EA0C06127B"}, {"criteria": "cpe:2.3:a:zemanta:related_posts:1.1:*:*:*:*:wordpress:*:*", "vulnerable": true, "matchCriteriaId": "71E49B56-6FF5-4668-AF0F-47CD3B1D0D6B"}, {"criteria": "cpe:2.3:a:zemanta:related_posts:1.2:*:*:*:*:wordpress:*:*", "vulnerable": true, "matchCriteriaId": "820277FA-4C3B-48CA-B19A-FB3914FE7D77"}, {"criteria": "cpe:2.3:a:zemanta:related_posts:1.3:*:*:*:*:wordpress:*:*", "vulnerable": true, "matchCriteriaId": "3AE14921-E43A-4BA4-8444-12F209E68929"}, {"criteria": "cpe:2.3:a:zemanta:related_posts:1.3.1:*:*:*:*:wordpress:*:*", "vulnerable": true, "matchCriteriaId": "8993E5FB-2E3A-4524-BD93-1F7092F11BCC"}, {"criteria": "cpe:2.3:a:zemanta:related_posts:1.3.2:*:*:*:*:wordpress:*:*", "vulnerable": true, "matchCriteriaId": "83DBBF6E-FE8C-4843-B390-C1AADFFD3AD3"}, {"criteria": "cpe:2.3:a:zemanta:related_posts:1.3.3:*:*:*:*:wordpress:*:*", "vulnerable": true, "matchCriteriaId": "D87740F4-03B5-42A4-B513-7BD866865588"}, {"criteria": "cpe:2.3:a:zemanta:related_posts:1.4:*:*:*:*:wordpress:*:*", "vulnerable": true, "matchCriteriaId": "5195FAC6-8F38-4D8E-893A-BE4B9FB93DCF"}, {"criteria": "cpe:2.3:a:zemanta:related_posts:1.5:*:*:*:*:wordpress:*:*", "vulnerable": true, "matchCriteriaId": "58A991EB-062F-4612-B2A5-FFF759928420"}, {"criteria": "cpe:2.3:a:zemanta:related_posts:1.6:*:*:*:*:wordpress:*:*", "vulnerable": true, "matchCriteriaId": "2A9AF413-90AC-4227-860A-8D657D09A53B"}, {"criteria": "cpe:2.3:a:zemanta:related_posts:1.7:*:*:*:*:wordpress:*:*", "vulnerable": true, "matchCriteriaId": "CBCDBB6D-9E00-4610-8A6B-A74E08D8043F"}, {"criteria": "cpe:2.3:a:zemanta:related_posts:1.8:*:*:*:*:wordpress:*:*", "vulnerable": true, "matchCriteriaId": "C32EA5B9-0FCB-4E60-8E7E-54729147AB33"}, {"criteria": "cpe:2.3:a:zemanta:related_posts:1.8.1:*:*:*:*:wordpress:*:*", "vulnerable": true, "matchCriteriaId": "401EEA87-DEE7-4ED9-B310-032C154D6C2A"}, {"criteria": "cpe:2.3:a:zemanta:related_posts:2.3:*:*:*:*:wordpress:*:*", "vulnerable": true, "matchCriteriaId": "8D654CF3-EECC-49A6-A8D8-C8FFCCC34AF7"}, {"criteria": "cpe:2.3:a:zemanta:related_posts:2.4.1:*:*:*:*:wordpress:*:*", "vulnerable": true, "matchCriteriaId": "18FE06DB-B338-4492-9FE8-DF225D2277DB"}, {"criteria": "cpe:2.3:a:zemanta:related_posts:2.5.1:*:*:*:*:wordpress:*:*", "vulnerable": true, "matchCriteriaId": "BC1FD22B-9CD6-40EB-8D36-473D60331DFD"}], "operator": "OR"}]}], "sourceIdentifier": "PSIRT-CNA@flexerasoftware.com"}