Nixpkgs Security Tracker

Login with GitHub

Suggestions search

All statuses

Filter by:

With package: haskellPackages.stylist-traits

Found 1 matching suggestions

View:

Compact

Detailed

Untriaged

Permalink CVE-2022-47183

5.4 MEDIUM

CVSS version: 3.1
Attack vector (AV): NETWORK
Attack complexity (AC): LOW
Privileges required (PR): NONE
User interaction (UI): REQUIRED
Scope (S): UNCHANGED
Confidentiality impact (C): NONE
Integrity impact (I): LOW
Availability impact (A): LOW

created 6 months ago

WordPress Extra Block Design, Style, CSS for ANY Gutenberg Blocks Plugin <= 0.2.6 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery (CSRF) vulnerability in StylistWP Extra Block Design, Style, CSS for ANY Gutenberg Blocks plugin <= 0.2.6 versions.

References

https://patchstack.com/database/vulnerability/stylist/wordpress-extra-block-des… vdb-entry
https://patchstack.com/database/vulnerability/stylist/wordpress-extra-block-des… x_transferred vdb-entry
https://patchstack.com/database/vulnerability/stylist/wordpress-extra-block-des… vdb-entry
https://patchstack.com/database/vulnerability/stylist/wordpress-extra-block-des… x_transferred vdb-entry

Affected products

stylist

=<0.2.6

Matching in nixpkgs

pkgs.haskellPackages.stylist-traits

Traits, datatypes, & parsers for Haskell Stylist

nixos-unstable -
- nixpkgs-unstable 0.1.4.0

1