Details of VAR-202208-2375

ID

VAR-202208-2375

CVE

CVE-2022-2599

TITLE

Anti-Malware Security and Brute-Force Firewall project of WordPress for Anti-Malware Security and Brute-Force Firewall Cross-site scripting vulnerability in

Trust: 0.8

sources: JVNDB: JVNDB-2022-017286

DESCRIPTION

The Anti-Malware Security and Brute-Force Firewall WordPress plugin before 4.21.83 does not sanitise and escape some parameters before outputting them back in an admin dashboard, leading to Reflected Cross-Site Scripting

Trust: 1.71

sources: NVD: CVE-2022-2599 // JVNDB: JVNDB-2022-017286 // VULHUB: VHN-430414

AFFECTED PRODUCTS

vendor:	anti malware security and brute force firewall	model:	anti-malware security and brute-force firewall	scope:	lt	version:	4.21.83	Trust: 1.0
vendor:	anti malware security and brute force firewall	model:	anti-malware security and brute-force firewall	scope:	eq	version:	4.21.83	Trust: 0.8
vendor:	anti malware security and brute force firewall	model:	anti-malware security and brute-force firewall	scope:	eq	version:	-	Trust: 0.8
vendor:	anti malware security and brute force firewall	model:	anti-malware security and brute-force firewall	scope:	-	version:	-	Trust: 0.8

sources: JVNDB: JVNDB-2022-017286 // NVD: CVE-2022-2599

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2022-2599
value:	MEDIUM
Trust: 1.0
NVD:	CVE-2022-2599
value:	MEDIUM
Trust: 0.8
CNNVD:	CNNVD-202208-4333
value:	MEDIUM
Trust: 0.6

nvd@nist.gov:	CVE-2022-2599
baseSeverity:	MEDIUM
baseScore:	6.1
vectorString:	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	REQUIRED
scope:	CHANGED
confidentialityImpact:	LOW
integrityImpact:	LOW
availabilityImpact:	NONE
exploitabilityScore:	2.8
impactScore:	2.7
version:	3.1
Trust: 1.0
NVD:	CVE-2022-2599
baseSeverity:	MEDIUM
baseScore:	6.1
vectorString:	CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	REQUIRED
scope:	CHANGED
confidentialityImpact:	LOW
integrityImpact:	LOW
availabilityImpact:	NONE
exploitabilityScore:	NONE
impactScore:	NONE
version:	3.0
Trust: 0.8

sources: JVNDB: JVNDB-2022-017286 // CNNVD: CNNVD-202208-4333 // NVD: CVE-2022-2599

PROBLEMTYPE DATA

problemtype:	CWE-79	Trust: 1.1
problemtype:	Cross-site scripting (CWE-79) [ others ]	Trust: 0.8

sources: VULHUB: VHN-430414 // JVNDB: JVNDB-2022-017286 // NVD: CVE-2022-2599

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-202208-4333

TYPE

XSS

Trust: 0.6

sources: CNNVD: CNNVD-202208-4333

PATCH

title:

WordPress plugin Anti-Malware Security and Brute-Force Firewall Fixes for cross-site scripting vulnerabilities

url:

http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=206394

Trust: 0.6

sources: CNNVD: CNNVD-202208-4333

EXTERNAL IDS

db:	NVD	id:	CVE-2022-2599	Trust: 3.3
db:	JVNDB	id:	JVNDB-2022-017286	Trust: 0.8
db:	CNNVD	id:	CNNVD-202208-4333	Trust: 0.6
db:	VULHUB	id:	VHN-430414	Trust: 0.1

sources: VULHUB: VHN-430414 // JVNDB: JVNDB-2022-017286 // CNNVD: CNNVD-202208-4333 // NVD: CVE-2022-2599

REFERENCES

url:	https://wpscan.com/vulnerability/276a7fc5-3d0d-446d-92cf-20060aecd0ef	Trust: 2.5
url:	https://nvd.nist.gov/vuln/detail/cve-2022-2599	Trust: 0.8
url:	https://cxsecurity.com/cveshow/cve-2022-2599/	Trust: 0.6

sources: VULHUB: VHN-430414 // JVNDB: JVNDB-2022-017286 // CNNVD: CNNVD-202208-4333 // NVD: CVE-2022-2599

SOURCES

db:	VULHUB	id:	VHN-430414
db:	JVNDB	id:	JVNDB-2022-017286
db:	CNNVD	id:	CNNVD-202208-4333
db:	NVD	id:	CVE-2022-2599

LAST UPDATE DATE

2024-08-14T14:37:19.706000+00:00

SOURCES UPDATE DATE

db:	VULHUB	id:	VHN-430414	date:	2022-09-01T00:00:00
db:	JVNDB	id:	JVNDB-2022-017286	date:	2023-10-12T02:22:00
db:	CNNVD	id:	CNNVD-202208-4333	date:	2022-09-02T00:00:00
db:	NVD	id:	CVE-2022-2599	date:	2022-09-01T06:47:36.513

SOURCES RELEASE DATE

db:	VULHUB	id:	VHN-430414	date:	2022-08-29T00:00:00
db:	JVNDB	id:	JVNDB-2022-017286	date:	2023-10-12T00:00:00
db:	CNNVD	id:	CNNVD-202208-4333	date:	2022-08-29T00:00:00
db:	NVD	id:	CVE-2022-2599	date:	2022-08-29T18:15:09.690