CVE-2022-3477

The tagDiv Composer WordPress plugin before 3.5, required by the Newspaper WordPress theme before 12.1 and Newsmag WordPress theme before 5.2.2, does not properly implement the Facebook login feature, allowing unauthenticated attackers to login as any user by just knowing their email address

CVSS v3 9.8 CRITICAL

9.8^/10

CVSS v3 : CRITICAL

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://wpscan.com/vulnerability/993a95d2-6fce-48de-ae17-06ce2db829ef	Exploit Third Party Advisory
https://wpscan.com/vulnerability/993a95d2-6fce-48de-ae17-06ce2db829ef	Exploit Third Party Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:newsmag_project:newsmag::::::wordpress::*
	cpe:2.3:a:newspaper_project:newspaper::::::wordpress::*
	cpe:2.3:a:tagdiv_composer_project:tagdiv_composer::::::wordpress::*

History

21 Nov 2024, 07:19

Type	Values Removed	Values Added
References	~~() https://wpscan.com/vulnerability/993a95d2-6fce-48de-ae17-06ce2db829ef - Exploit, Third Party Advisory~~	() https://wpscan.com/vulnerability/993a95d2-6fce-48de-ae17-06ce2db829ef - Exploit, Third Party Advisory

Information

Published : 2022-11-14 15:15

Updated : 2024-11-21 07:19

NVD link : CVE-2022-3477

Mitre link : CVE-2022-3477

CVE.ORG link : CVE-2022-3477

JSON object : View

Products Affected

newspaper_project

newspaper

newsmag_project

newsmag

tagdiv_composer_project

tagdiv_composer

CWE

CWE-287

Improper Authentication

{"id": "CVE-2022-3477", "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}]}, "published": "2022-11-14T15:15:49.257", "references": [{"url": "https://wpscan.com/vulnerability/993a95d2-6fce-48de-ae17-06ce2db829ef", "tags": ["Exploit", "Third Party Advisory"], "source": "contact@wpscan.com"}, {"url": "https://wpscan.com/vulnerability/993a95d2-6fce-48de-ae17-06ce2db829ef", "tags": ["Exploit", "Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Secondary", "source": "contact@wpscan.com", "description": [{"lang": "en", "value": "CWE-287"}]}], "descriptions": [{"lang": "en", "value": "The tagDiv Composer WordPress plugin before 3.5, required by the Newspaper WordPress theme before 12.1 and Newsmag WordPress theme before 5.2.2, does not properly implement the Facebook login feature, allowing unauthenticated attackers to login as any user by just knowing their email address"}, {"lang": "es", "value": "El complemento de WordPress tagDiv Composer anterior a 3.5, requerido por el tema Newspaper WordPress anterior a 12.1 y el tema Newsmag de WordPress anterior a 5.2.2, no implementa correctamente la funci\u00f3n de inicio de sesi\u00f3n de Facebook, lo que permite a atacantes no autenticados iniciar sesi\u00f3n como cualquier usuario con solo conocer su direcci\u00f3n de correo electr\u00f3nico."}], "lastModified": "2024-11-21T07:19:36.870", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:newsmag_project:newsmag:*:*:*:*:*:wordpress:*:*", "vulnerable": true, "matchCriteriaId": "98B27918-A366-4CC1-A391-356969E6CB1A", "versionEndExcluding": "5.2.2"}, {"criteria": "cpe:2.3:a:newspaper_project:newspaper:*:*:*:*:*:wordpress:*:*", "vulnerable": true, "matchCriteriaId": "DBB5920F-1041-458B-AF52-97714769C273", "versionEndExcluding": "12.1"}, {"criteria": "cpe:2.3:a:tagdiv_composer_project:tagdiv_composer:*:*:*:*:*:wordpress:*:*", "vulnerable": true, "matchCriteriaId": "B4D12BBD-39CC-49F9-BA78-956D9BA609C0", "versionEndExcluding": "3.5"}], "operator": "OR"}]}], "sourceIdentifier": "contact@wpscan.com"}