PT-2013-4258 · Shareaholic · Shareaholic Sexybookmarks Plugin

Publicado 2013-08-08 · Atualizado 2017-08-29 · CVE-2013-3256

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Shareaholic SexyBookmarks plugin version 6.1.4.0

Description A cross-site request forgery (CSRF) issue allows remote attackers to hijack the authentication of users for requests that manipulate plugin settings.

Recommendations For Shareaholic SexyBookmarks plugin version 6.1.4.0, consider disabling the plugin until a patch is available to prevent manipulation of plugin settings.

Correção

CSRF

Enumeração de Fraquezas

CWE-352

Identificadores relacionados

CVE-2013-3256

Produtos afetados

Shareaholic Sexybookmarks Plugin

Referências · 6

• http://securityfocus.com/bid/61561 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/86126 · Nota
• http://wordpress.org/plugins/sexybookmarks/changelog · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2013-3256 · Nota de Segurança
• http://secunia.com/advisories/53138 · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3256 · Nota