PT-2023-10625 · Bastianallgeier · Bastianallgeier Kirby Webmentions Plugin

Bastianallgeier · Publicado 2023-01-19 · Atualizado 2024-05-17 · CVE-2017-20174

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions bastianallgeier Kirby Webmentions Plugin (affected versions not specified)

Description A vulnerability was found in the bastianallgeier Kirby Webmentions Plugin, allowing for injection attacks. The manipulation can be launched remotely, but the complexity of the attack is rather high, and exploitation is known to be difficult.

Recommendations Apply a patch to fix this issue. The patch is identified as 55bedea78ae9af916a9a41497bd9996417851502.

Correção

Special Elements Injection

Enumeração de Fraquezas

CWE-74

Identificadores relacionados

CVE-2017-20174

Produtos afetados

Bastianallgeier Kirby Webmentions Plugin

Referências · 6

• https://github.com/bastianallgeier/kirby-webmentions/commit/55bedea78ae9af916a9a41497bd9996417851502 · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2017-20174 · Nota de Segurança
• https://t.me/cvenotify/42404 · Publicação no Telegram
• https://vuldb.com/?id.218894 · Nota
• https://osv.dev/vulnerability/CVE-2017-20174 · Aviso do Fabricante
• https://vuldb.com/?ctiid.218894 · Nota