PT-2023-10260 · Unknown · Arnoldle Submitbymailplugin

Arnoldle · Publicado 2023-02-20 · Atualizado 2024-05-17 · CVE-2015-10081

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions arnoldle submitByMailPlugin version 1.0b2.9

Description A vulnerability was found in the processing of the file edit list.php, leading to cross-site request forgery. The attack may be initiated remotely.

Recommendations For arnoldle submitByMailPlugin version 1.0b2.9, upgrade to version 1.0b2.9a to address this issue.

Correção

CSRF

Enumeração de Fraquezas

CWE-352

Identificadores relacionados

CVE-2015-10081

Produtos afetados

Arnoldle Submitbymailplugin

Referências · 5

• https://github.com/arnoldle/phplist-plugin-submitByMailPlugin/commit/a739f680a1623d22f52ff1371e86ca472e63756f · Correção
• https://vuldb.com/?id.221495 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2015-10081 · Nota de Segurança
• https://t.me/cibsecurity/58537 · Publicação no Telegram
• https://vuldb.com/?ctiid.221495 · Nota