{
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2020/JVNDB-2020-000046.html",
  "dc:date": "2020-07-22T14:24+09:00",
  "dcterms:issued": "2020-07-22T14:24+09:00",
  "dcterms:modified": "2020-07-22T14:24+09:00",
  "description": "WordPress Plugin \"Social Sharing Plugin\" provided by Social Rocket contains a cross-site request forgery vulnerability (CWE-352).\r\n\r\nAkio Furui of Cryptography Laboratory, Department of Information and Communication Engineering, Tokyo Denki University reported this vulnerability to the developer and coordinated on his own.\r\nAfter coordination was completed, this case was reported to IPA, and JPCERT/CC coordinated with the developer for the publication under Information Security Early Warning Partnership.",
  "link": "https://jvndb.jvn.jp/en/contents/2020/JVNDB-2020-000046.html",
  "sec:cpe": {
    "#text": "cpe:/a:wpsocialrocket:social_sharing",
    "@product": "Social Sharing Plugin",
    "@vendor": "Social Rocket",
    "@version": "2.2"
  },
  "sec:cvss": [
    {
      "@score": "2.6",
      "@severity": "Low",
      "@type": "Base",
      "@vector": "AV:N/AC:H/Au:N/C:N/I:P/A:N",
      "@version": "2.0"
    },
    {
      "@score": "4.3",
      "@severity": "Medium",
      "@type": "Base",
      "@vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
      "@version": "3.0"
    }
  ],
  "sec:identifier": "JVNDB-2020-000046",
  "sec:references": [
    {
      "#text": "https://jvn.jp/en/jp/JVN05502028/index.html",
      "@id": "JVN#05502028",
      "@source": "JVN"
    },
    {
      "#text": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-5611",
      "@id": "CVE-2020-5611",
      "@source": "CVE"
    },
    {
      "#text": "https://nvd.nist.gov/vuln/detail/CVE-2020-5611",
      "@id": "CVE-2020-5611",
      "@source": "NVD"
    },
    {
      "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
      "@id": "CWE-352",
      "@title": "Cross-Site Request Forgery(CWE-352)"
    }
  ],
  "title": "WordPress Plugin \"Social Sharing Plugin\" vulnerable to cross-site request forgery"
}