PT-2023-10281 · WordPress · Freshdesk Plugin

Published 2023-04-17 · Updated 2024-05-17 · CVE-2015-10102

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Freshdesk Plugin version 1.7

Description A critical issue has been found in the Freshdesk Plugin on WordPress, affecting some unknown functionality. This issue leads to open redirect and can be exploited remotely.

Recommendations For Freshdesk Plugin version 1.7, upgrade to version 1.8 to address this issue.

Fix

Open Redirect

Weakness Enumeration

CWE-601

Related Identifiers

CVE-2015-10102

Affected Products

Freshdesk Plugin

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2015-10102 · Security Note
• https://github.com/wp-plugins/freshdesk-support/commit/2aaecd4e0c7c6c1dc4e6a593163d5f7aa0fa5d5b · Patch
• https://t.me/cibsecurity/62300 · Telegram Post
• https://vuldb.com/?ctiid.226118 · Note
• https://vuldb.com/?id.226118 · Note
• https://t.me/cvenotify/48440 · Telegram Post
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-10102 · Note
• https://t.me/cvenotify/64331 · Telegram Post