NVD Vulnerability Detail

CVE-2015-10115

Summary	A vulnerability, which was classified as problematic, was found in WooSidebars Sidebar Manager Converter Plugin up to 1.1.1 on WordPress. This affects the function process_request of the file classes/class-woosidebars-sbm-converter.php. The manipulation leads to open redirect. It is possible to initiate the attack remotely. Upgrading to version 1.1.2 is able to address this issue. The patch is named a0efb4ffb9dfe2925b889c1aa5ea40b4abbbda8a. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-230655.
Publication Date	June 6, 2023, 3:15 a.m.
Registration Date	June 6, 2023, 10 a.m.
Last Update	Nov. 21, 2024, 11:24 a.m.

Affected software configurations

Configuration1		or higher	or less	more than	less than
cpe:2.3:a:woocommerce:sidebar_manager_to_woosidebars_converter::::::wordpress::*			1.1.1

Related information, measures and tools

No	URL	タグ
1	https://github.com/wp-plugins/woosidebars-sbm-converter/commit/a0efb4ffb9dfe2925b889c1aa5ea40b4abbbda8a	Patch
2	https://github.com/wp-plugins/woosidebars-sbm-converter/commit/a0efb4ffb9dfe2925b889c1aa5ea40b4abbbda8a	Patch
3	https://vuldb.com/?ctiid.230655	Permissions Required Third Party Advisory
4	https://vuldb.com/?ctiid.230655	Permissions Required Third Party Advisory
5	https://vuldb.com/?id.230655	Third Party Advisory
6	https://vuldb.com/?id.230655	Third Party Advisory

Common Vulnerabilities List

JVN Vulnerability Information

WooCommerce project の WordPress 用 sidebar manager to woosidebars converter におけるオープンリダイレクトの脆弱性

Title	WooCommerce project の WordPress 用 sidebar manager to woosidebars converter におけるオープンリダイレクトの脆弱性
Summary	WooCommerce project の WordPress 用 sidebar manager to woosidebars converter には、オープンリダイレクトの脆弱性が存在します。
Possible impacts	情報を取得される、および情報を改ざんされる可能性があります。
Solution	ベンダアドバイザリまたはパッチ情報が公開されています。参考情報を参照して適切な対策を実施してください。
Publication Date	June 5, 2023, midnight
Registration Date	Nov. 28, 2023, 5:15 p.m.
Last Update	Nov. 28, 2023, 5:15 p.m.

Affected System

WooCommerce project

sidebar manager to woosidebars converter 1.1.1 およびそれ以前

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2015-10115	https://www.cve.org/CVERecord?id=CVE-2015-10115
National Vulnerability Database (NVD)
2	CVE-2015-10115	https://nvd.nist.gov/vuln/detail/CVE-2015-10115

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-601	https://cwe.mitre.org/data/definitions/601.html

その他

No	Name	URL
関連文書
1	github.com (a0efb4ffb9dfe2925b889c1aa5ea40b4abbbda8a)	https://github.com/wp-plugins/woosidebars-sbm-converter/commit/a0efb4ffb9dfe2925b889c1aa5ea40b4abbbda8a
2	vuldb.com (id.230655)	https://vuldb.com/?id.230655

Change Log

No	Changed Details	Date of change
1	[2023年11月28日] 掲載	Nov. 28, 2023, 5:15 p.m.