PT-2017-18597 · WordPress · Clean Login Plugin

Publicado 2017-05-10 · Atualizado 2017-05-18 · CVE-2017-8875

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Clean Login plugin versions prior to 1.8 for WordPress

Description The issue allows remote attackers to change the login redirect URL or logout redirect URL due to a CSRF flaw.

Recommendations For Clean Login plugin versions prior to 1.8, update to version 1.8 or later to resolve the issue.

Exploit

Correção

CSRF

Enumeração de Fraquezas

CWE-352

Identificadores relacionados

CVE-2017-8875

Produtos afetados

Clean Login Plugin

Referências · 4

• 🔥 http://seclists.org/fulldisclosure/2017/May/23 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2017-8875 · Nota de Segurança
• https://wordpress.org/plugins/clean-login/#developers · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2017-8875 · Aviso do Fabricante