{
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2021/JVNDB-2021-000012.html",
  "dc:date": "2021-02-05T16:24+09:00",
  "dcterms:issued": "2021-02-05T16:24+09:00",
  "dcterms:modified": "2021-02-05T16:24+09:00",
  "description": "WordPress Plugin \"Name Directory\" provided by J. Peters contains a cross-site request forgery vulnerability (CWE-352).\r\n\r\nYuta Asai of Cryptography Laboratory, Department of Information and Communication Engineering, Tokyo Denki University reported this vulnerability to the developer and coordinated on his own.\r\nAfter coordination was completed, this case was reported to IPA, and JPCERT/CC coordinated with the developer for the publication under Information Security Early Warning Partnership.",
  "link": "https://jvndb.jvn.jp/en/contents/2021/JVNDB-2021-000012.html",
  "sec:cpe": {
    "#text": "cpe:/a:name_directory_project:name_directory",
    "@product": "Name Directory",
    "@vendor": "J. Peters",
    "@version": "2.2"
  },
  "sec:cvss": [
    {
      "@score": "2.6",
      "@severity": "Low",
      "@type": "Base",
      "@vector": "AV:N/AC:H/Au:N/C:N/I:P/A:N",
      "@version": "2.0"
    },
    {
      "@score": "4.3",
      "@severity": "Medium",
      "@type": "Base",
      "@vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
      "@version": "3.0"
    }
  ],
  "sec:identifier": "JVNDB-2021-000012",
  "sec:references": [
    {
      "#text": "https://jvn.jp/en/jp/JVN50470170/index.html",
      "@id": "JVN#50470170",
      "@source": "JVN"
    },
    {
      "#text": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20652",
      "@id": "CVE-2021-20652",
      "@source": "CVE"
    },
    {
      "#text": "https://nvd.nist.gov/vuln/detail/CVE-2021-20652",
      "@id": "CVE-2021-20652",
      "@source": "NVD"
    },
    {
      "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
      "@id": "CWE-352",
      "@title": "Cross-Site Request Forgery(CWE-352)"
    }
  ],
  "title": "WordPress Plugin \"Name Directory\" vulnerable to cross-site request forgery"
}