PT-2023-21136 · Makestories Team · Makestories

Rio Darmawan

·

CVE-2023-27448

·

Publicado

2023-10-06

·

Atualizado

2023-10-10

CVSS v3.1

8.8

Alta

VetorAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions MakeStories Team MakeStories (for Google Web Stories) plugin versions <= 2.8.0
Description A Cross-Site Request Forgery (CSRF) issue affects the MakeStories Team MakeStories plugin. This type of issue allows an attacker to trick a user into performing unintended actions on a web application that the user is authenticated to.
Recommendations For versions <= 2.8.0, update to a version greater than 2.8.0 to resolve the issue. At the moment, there is no information about additional mitigation measures for this specific issue.

Correção

CSRF

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-352

Identificadores relacionados

CVE-2023-27448

Produtos afetados

Makestories