PT-2023-13608 · Imagely · Imagely Wordpress Gallery Plugin - Nextgen Gallery

István Márton + 1 · Published 2023-03-01 · Updated 2023-03-08 · CVE-2022-38468

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Imagely WordPress Gallery Plugin - NextGEN Gallery versions prior to 3.29

Description The issue is related to a Cross-Site Request Forgery (CSRF) vulnerability, which can lead to thumbnail alteration.

Recommendations For versions prior to 3.29, update to version 3.29 or later to resolve the issue.

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2022-38468

Affected Products

Imagely Wordpress Gallery Plugin - Nextgen Gallery

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2022-38468 · Security Note
• https://osv.dev/vulnerability/CVE-2022-38468 · Vendor Advisory
• https://patchstack.com/database/vulnerability/nextgen-gallery/wordpress-wordpress-gallery-plugin-nextgen-gallery-plugin-3-28-cross-site-request-forgery-csrf?_s_id=cve · Note
• https://t.me/cibsecurity/59231 · Telegram Post