PT-2023-16549 · Bestwebsoft · User Role

Dc11 · Publicado 2023-04-03 · Atualizado 2025-02-14 · CVE-2023-0820

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions User Role by BestWebSoft WordPress plugin versions prior to 1.6.7

Description The issue concerns a lack of protection against Cross-Site Request Forgery (CSRF) in requests to update role capabilities, leading to arbitrary privilege escalation of any role.

Recommendations For versions prior to 1.6.7, update to version 1.6.7 or later to resolve the issue.

Exploit

Correção

CSRF

Enumeração de Fraquezas

CWE-352

Identificadores relacionados

CVE-2023-0820

Produtos afetados

User Role

Referências · 6

• 🔥 https://wpscan.com/vulnerability/b93d9f9d-0fd9-49b8-b465-d32b95351912 · Exploit
• https://t.me/cibsecurity/61329 · Publicação no Telegram
• https://t.me/cvenotify/47824 · Publicação no Telegram
• https://t.me/cvenotify/111444 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2023-0820 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2023-0820 · Aviso do Fabricante