PT-2023-12918 · Unknown · Arscode Ninja Popups

Dave Jong · Publicado 2023-08-10 · Atualizado 2023-08-15 · CVE-2022-27861

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Arscode Ninja Popups plugin versions 4.7.5 and earlier

Description The issue is an Unauth. Open Redirect vulnerability. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world incidents where this issue was exploited.

Recommendations For versions 4.7.5 and earlier, update to a version later than 4.7.5 to resolve the issue. At the moment, there is no information about other specific fixes for this vulnerability.

Correção

Open Redirect

Enumeração de Fraquezas

CWE-601

Identificadores relacionados

CVE-2022-27861

Produtos afetados

Arscode Ninja Popups

Referências · 6

• https://osv.dev/vulnerability/CVE-2022-27861 · Aviso do Fabricante
• https://t.me/cibsecurity/68185 · Publicação no Telegram
• https://twitter.com/geekphane/status/1689616361075425281 · Publicação no Twitter
• https://patchstack.com/database/vulnerability/arscode-ninja-popups/wordpress-ninja-popups-plugin-4-7-5-unauth-open-redirect-vulnerability?_s_id=cve · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2022-27861 · Nota de Segurança
• https://twitter.com/mark_a_figueroa/status/1689619962246070272 · Publicação no Twitter