CVE-2013-3479

Cross-site request forgery (CSRF) vulnerability in the ShareThis plugin before 7.0.6 for WordPress allows remote attackers to hijack the authentication of administrators for requests that modify this plugin's settings.

CVSS v2.0 6.8 MEDIUM

6.8^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability : 8.6 / Impact : 6.4

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://secunia.com/advisories/53135	Vendor Advisory
http://wordpress.org/plugins/share-this/changelog/

Configurations

Configuration 1 (hide)

AND

OR	cpe:2.3:a:sharethis:sharethis::::::::
	cpe:2.3:a:sharethis:sharethis:5.2.1:::::::*
	cpe:2.3:a:sharethis:sharethis:5.3:::::::*
	cpe:2.3:a:sharethis:sharethis:5.4.1:::::::*
	cpe:2.3:a:sharethis:sharethis:6.0:::::::*
	cpe:2.3:a:sharethis:sharethis:7.0:::::::*
	cpe:2.3:a:sharethis:sharethis:7.0.1:::::::*
	cpe:2.3:a:sharethis:sharethis:7.0.2:::::::*
	cpe:2.3:a:sharethis:sharethis:7.0.3:::::::*
	cpe:2.3:a:sharethis:sharethis:7.0.4:::::::*

cpe:2.3:a:wordpress:wordpress:-:*:*:*:*:*:*:*

History

No history.

Information

Published : 2013-09-05 03:27

Updated : 2024-02-04 18:16

NVD link : CVE-2013-3479

Mitre link : CVE-2013-3479

CVE.ORG link : CVE-2013-3479

JSON object : View

Products Affected

wordpress

wordpress

sharethis

sharethis

CWE

CWE-352

Cross-Site Request Forgery (CSRF)

{"id": "CVE-2013-3479", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 6.8, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}]}, "published": "2013-09-05T03:27:29.613", "references": [{"url": "http://secunia.com/advisories/53135", "tags": ["Vendor Advisory"], "source": "PSIRT-CNA@flexerasoftware.com"}, {"url": "http://wordpress.org/plugins/share-this/changelog/", "source": "PSIRT-CNA@flexerasoftware.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-352"}]}], "descriptions": [{"lang": "en", "value": "Cross-site request forgery (CSRF) vulnerability in the ShareThis plugin before 7.0.6 for WordPress allows remote attackers to hijack the authentication of administrators for requests that modify this plugin's settings."}, {"lang": "es", "value": "Vulnerabilidad CSRF (Cross-site request forgery) en el plugin ShareThis anterior a v7.0.6 para WordPress permite a atacantes remotos secuestrar la autenticaci\u00f3n de los administradores para solicitudes que modifican la configuraci\u00f3n de este plugin."}], "lastModified": "2013-09-26T16:47:52.877", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:sharethis:sharethis:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FC26F532-3FBC-48C0-BF77-A3C71F50560D", "versionEndIncluding": "7.0.5"}, {"criteria": "cpe:2.3:a:sharethis:sharethis:5.2.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E7941767-E57D-4388-9884-94D87FBE7E3B"}, {"criteria": "cpe:2.3:a:sharethis:sharethis:5.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "32CF725B-140F-4A6D-849C-8E4488B7B72F"}, {"criteria": "cpe:2.3:a:sharethis:sharethis:5.4.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "69FCCFE7-A11D-433F-81E1-433D195DFCFE"}, {"criteria": "cpe:2.3:a:sharethis:sharethis:6.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "889F675F-6B00-4547-B959-C5714DCD7C70"}, {"criteria": "cpe:2.3:a:sharethis:sharethis:7.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A86287B8-4D1B-44DE-B9E7-72FF9C78ACC2"}, {"criteria": "cpe:2.3:a:sharethis:sharethis:7.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "48F0B051-5ADE-472F-A901-BE99C5AF5D81"}, {"criteria": "cpe:2.3:a:sharethis:sharethis:7.0.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "04B5EF4A-A55C-483B-B77C-EBCB9911B3CD"}, {"criteria": "cpe:2.3:a:sharethis:sharethis:7.0.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8CB32899-AB2E-4642-861A-74BB0EDA88BD"}, {"criteria": "cpe:2.3:a:sharethis:sharethis:7.0.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BBDD5BC4-DB24-440F-8FE1-424373464F73"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:wordpress:wordpress:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "A77EB0E7-7FA7-4232-97DF-7C7587D163F1"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "PSIRT-CNA@flexerasoftware.com"}