Author: Angelo Barbosa

CVE-2023-5611 | Seraphinite Accelerator Plugin up to 2.20.31 on WordPress Setting cross-site request forgery

A vulnerability classified as problematic was found in Seraphinite Accelerator Plugin up to 2.20.31 on WordPress. Affected by this vulnerability is an unknown functionality of the component Setting Handler. The manipulation leads to cross-site request forgery. This vulnerability is known as CVE-2023-5611. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected...

Read More

CVE-2023-6287 | Tribe29 Checkmk Appliance up to 1.6.7 Log File get request method with sensitive query strings

A vulnerability, which was classified as problematic, was found in Tribe29 Checkmk Appliance up to 1.6.7. Affected is an unknown function of the component Log File Handler. The manipulation leads to use of get request method with sensitive query strings. This vulnerability is traded as CVE-2023-6287. Local access is required to approach this attack. There is no exploit available. It is recommended to upgrade the affected...

Read More