PT-2023-10287 · Meitar · Meitar Inline Google Spreadsheet Viewer Plugin

Published 2023-05-31 · Updated 2024-05-17 · CVE-2015-10108

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions meitar Inline Google Spreadsheet Viewer Plugin versions up to 0.9.6

Description A vulnerability was found in the meitar Inline Google Spreadsheet Viewer Plugin, which is classified as problematic. The issue affects the displayShortcode function of the file inline-gdocs-viewer.php. This leads to cross-site request forgery, and the attack can be launched remotely.

Recommendations For meitar Inline Google Spreadsheet Viewer Plugin versions up to 0.9.6, upgrade to version 0.9.6.1 to address this issue. As a temporary workaround, consider disabling the displayShortcode function of the inline-gdocs-viewer.php file until the patch is applied.

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2015-10108

Affected Products

Meitar Inline Google Spreadsheet Viewer Plugin

References · 7

• https://github.com/wp-plugins/inline-google-spreadsheet-viewer/releases/tag/0.9.6.1 · Patch
• https://github.com/wp-plugins/inline-google-spreadsheet-viewer/commit/2a8057df8ca30adc859cecbe5cad21ac28c5b747 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2015-10108 · Security Note
• https://vuldb.com/?ctiid.230234 · Note
• https://t.me/cvenotify/51508 · Telegram Post
• https://t.me/cvenotify/51899 · Telegram Post
• https://vuldb.com/?id.230234 · Note