PT-2019-14388 · Unknown · Insta-Gallery

Publicado 2019-08-29 · Atualizado 2019-09-03 · CVE-2019-15779

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions insta-gallery plugin versions prior to 2.4.8

Description The issue concerns the lack of nonce validation for certain actions. Specifically, it affects the qligg dismiss notice and qligg form item delete actions, which can be exploited due to the absence of proper validation.

Recommendations For versions prior to 2.4.8, update to version 2.4.8 or later to resolve the issue.

Correção

CSRF

Enumeração de Fraquezas

CWE-352

Identificadores relacionados

CVE-2019-15779

Produtos afetados

Insta-Gallery

Referências · 4

• https://wordpress.org/plugins/insta-gallery/#developers · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2019-15779 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-15779 · Aviso do Fabricante
• https://wpvulndb.com/vulnerabilities/9853 · Nota