PT-2024-23913 · Unknown · Supsystic Easy Google Maps

Steven Julian · Published 2024-04-12 · Updated 2024-04-15 · CVE-2024-31269

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Supsystic Easy Google Maps versions 1.11.11 and earlier

Description A Cross-Site Request Forgery (CSRF) issue has been identified. This type of issue allows an attacker to trick a user into performing unintended actions on a web application that the user is authenticated to.

Recommendations For versions 1.11.11 and earlier, update to a version that contains a fix for this issue, if available. If no specific fix is provided for your version, and no updated version is available, consider implementing additional security measures to mitigate CSRF risks, such as validating request headers or using tokens to verify request authenticity.

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2024-31269

Affected Products

Supsystic Easy Google Maps

References · 3

• https://osv.dev/vulnerability/CVE-2024-31269 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-31269 · Security Note
• https://patchstack.com/database/vulnerability/google-maps-easy/wordpress-easy-google-maps-plugin-1-11-11-cross-site-request-forgery-csrf-vulnerability?_s_id=cve · Note