CVE-2024-32112

Cross-Site Request Forgery (CSRF) vulnerability in Leadinfo leadinfo. The patch was released under the same version which was reported as vulnerable. We consider the current version as vulnerable.This issue affects Leadinfo: from n/a through 1.0.

CVSS v3 4.3 MEDIUM

4.3^/10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact NONE

Integrity Impact LOW

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://patchstack.com/database/vulnerability/leadinfo/wordpress-leadinfo-plugin-1-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
https://patchstack.com/database/vulnerability/leadinfo/wordpress-leadinfo-plugin-1-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve

Configurations

No configuration.

History

21 Nov 2024, 09:14

Type	Values Removed	Values Added
Summary		(es) Vulnerabilidad de Cross-Site Request Forgery (CSRF) en Leadinfo leadinfo. El parche se lanzó con la misma versión que se informó como vulnerable. Consideramos que la versión actual es vulnerable. Este problema afecta a Leadinfo: desde n/a hasta 1.0.
References	~~() https://patchstack.com/database/vulnerability/leadinfo/wordpress-leadinfo-plugin-1-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve -~~	() https://patchstack.com/database/vulnerability/leadinfo/wordpress-leadinfo-plugin-1-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve -

11 Apr 2024, 12:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2024-04-11 12:15

Updated : 2024-11-21 09:14

NVD link : CVE-2024-32112

Mitre link : CVE-2024-32112

CVE.ORG link : CVE-2024-32112

JSON object : View

Products Affected

No product.

CWE

CWE-352

Cross-Site Request Forgery (CSRF)

4.3 /10