PT-2024-11755 · Repute Infosystems · Armember Premium+1

Cat + 1 · Published 2024-11-19 · Updated 2024-11-20 · CVE-2022-47424

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Repute InfoSystems ARMember versions 4.0.5 and earlier Repute InfoSystems ARMember Premium versions prior to 6.7.1

Description A Cross-Site Request Forgery (CSRF) issue affects the software, allowing unauthorized actions. This is a type of attack where an attacker tricks a user into performing unintended actions on a web application that the user is authenticated to.

Recommendations For Repute InfoSystems ARMember versions 4.0.5 and earlier, update to version 4.0.6 or later. For Repute InfoSystems ARMember Premium versions prior to 6.7.1, update to version 6.7.1 or later.

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2022-47424

Affected Products

Armember

Armember Premium

References · 4

• https://osv.dev/vulnerability/CVE-2022-47424 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-47424 · Security Note
• https://patchstack.com/database/vulnerability/armember-membership/wordpress-armember-plugin-4-0-5-cross-site-request-forgery-csrf?_s_id=cve · Note
• https://twitter.com/CVEnew/status/1859089550422778032 · Twitter Post