PT-2023-10260 · Unknown · Arnoldle Submitbymailplugin

Arnoldle · Published 2023-02-20 · Updated 2024-05-17 · CVE-2015-10081

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions arnoldle submitByMailPlugin version 1.0b2.9

Description A vulnerability was found in the processing of the file edit list.php, leading to cross-site request forgery. The attack may be initiated remotely.

Recommendations For arnoldle submitByMailPlugin version 1.0b2.9, upgrade to version 1.0b2.9a to address this issue.

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2015-10081

Affected Products

Arnoldle Submitbymailplugin

References · 5

• https://github.com/arnoldle/phplist-plugin-submitByMailPlugin/commit/a739f680a1623d22f52ff1371e86ca472e63756f · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2015-10081 · Security Note
• https://vuldb.com/?id.221495 · Note
• https://t.me/cibsecurity/58537 · Telegram Post
• https://vuldb.com/?ctiid.221495 · Note