PT-2022-19605
CVE-2022-29431
·
تاريخ النشر
2022-05-20
·
تاريخ التحديث
2022-05-26
الوصف من
CVSS 2.0
5.8
متوسطةالمقاييسAV:N/AC:M/Au:N/C:N/I:P/A:P
Name of the Vulnerable Software and Affected Versions
KubiQ CPT base plugin versions <= 5.8
Description
A Cross-Site Request Forgery (CSRF) issue allows an attacker to delete the CPT base. This can be exploited by an attacker to manipulate requests, potentially leading to unauthorized actions on the affected system.
Recommendations
For KubiQ CPT base plugin versions <= 5.8, update to a version higher than 5.8 to resolve the issue. As a temporary workaround, consider implementing additional validation checks for requests to prevent unauthorized actions. Restrict access to sensitive functionality to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾