PT-2022-19605

CVE-2022-29431

·

Published

2022-05-20

·

Updated

2022-05-26

Description by

CVSS 2.0
5.8
Medium
MetricsAV:N/AC:M/Au:N/C:N/I:P/A:P
Name of the Vulnerable Software and Affected Versions KubiQ CPT base plugin versions <= 5.8
Description A Cross-Site Request Forgery (CSRF) issue allows an attacker to delete the CPT base. This can be exploited by an attacker to manipulate requests, potentially leading to unauthorized actions on the affected system.
Recommendations For KubiQ CPT base plugin versions <= 5.8, update to a version higher than 5.8 to resolve the issue. As a temporary workaround, consider implementing additional validation checks for requests to prevent unauthorized actions. Restrict access to sensitive functionality to minimize the risk of exploitation.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾