8.8

CVE-2023-2330

Exploit

Caldera Forms Google Sheets Connector < 1.3 - Access Code Update via CSRF

Caldera Forms Google Sheets Connector <= 1.3 - Cross-Site Request Forgery

The Caldera Forms Google Sheets Connector WordPress plugin before 1.3 does not have CSRF check when updating its Access Code, which could allow attackers to make logged in admin change the access code to an arbitrary one via a CSRF attack
Mögliche Gegenmaßnahme
Caldera Forms Google Sheets Connector: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Gsheetconnector ≫ Caldera Forms Google Sheets Connector SwPlatform wordpress Version <= 1.2
Weitere Schwachstelleninformationen
SystemWordPress Plugin
≫
Produkt Caldera Forms Google Sheets Connector
Version *-1.3
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.39% 0.31
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 8.8 2.8 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://wpscan.com/vulnerability/fa8ccdd0-7b23-4b12-9aa9-4b29d47256b8
Third Party Advisory
Exploit
https://www.wordfence.com/threat-intel/vulnerabilities/id/b5ec03e9-06bb-4677-b480-4ebdb33acd08
Third Party Advisory