{
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2019/JVNDB-2019-000028.html",
  "dc:date": "2019-10-01T11:11+09:00",
  "dcterms:issued": "2019-05-23T14:10+09:00",
  "dcterms:modified": "2019-10-01T11:11+09:00",
  "description": "WordPress plugin \"WP Open Graph\" provided by Custom4Web contains a cross-site request forgery vulnerability (CWE-352).\r\n\r\nKoichi Kuriyama of Cryptography Laboratory,Department ofInformation and Communication Engineering,Tokyo Denki University directly reported this vulnerability to the developer and coordinated on his own.\r\nAfter coordination was completed, this case was reported to IPA, and JPCERT/CC coordinated with the developer for the publication under Information Security Early Warning Partnership.",
  "link": "https://jvndb.jvn.jp/en/contents/2019/JVNDB-2019-000028.html",
  "sec:cpe": {
    "#text": "cpe:/a:custom4web:wp_open_graph",
    "@product": "WP Open Graph",
    "@vendor": "Custom4Web",
    "@version": "2.2"
  },
  "sec:cvss": [
    {
      "@score": "2.6",
      "@severity": "Low",
      "@type": "Base",
      "@vector": "AV:N/AC:H/Au:N/C:N/I:P/A:N",
      "@version": "2.0"
    },
    {
      "@score": "4.3",
      "@severity": "Medium",
      "@type": "Base",
      "@vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
      "@version": "3.0"
    }
  ],
  "sec:identifier": "JVNDB-2019-000028",
  "sec:references": [
    {
      "#text": "https://jvn.jp/en/jp/JVN33652328/index.html",
      "@id": "JVN#33652328",
      "@source": "JVN"
    },
    {
      "#text": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5960",
      "@id": "CVE-2019-5960",
      "@source": "CVE"
    },
    {
      "#text": "https://nvd.nist.gov/vuln/detail/CVE-2019-5960",
      "@id": "CVE-2019-5960",
      "@source": "NVD"
    },
    {
      "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
      "@id": "CWE-352",
      "@title": "Cross-Site Request Forgery(CWE-352)"
    }
  ],
  "title": "WordPress plugin \"WP Open Graph\" vulnerable to cross-site request forgery"
}