VulnerabilityModified
CVE-2012-0320
Movable Type before 4.38, 5.0x before 5.07, and 5.1x before 5.13 allows remote attackers to take control of sessions via unspecified vectors related to the (1) commenting feature and (2) community script.
HIGH 7.5EPSS 2.68%
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (2.68%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
Movable Type before 4.38, 5.0x before 5.07, and 5.1x before 5.13 allows remote attackers to take control of sessions via unspecified vectors related to the (1) commenting feature and (2) community script.
- CVSS 2.0
- 7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
- EPSS
- 2.68% probability · 85th percentile
- CISA KEV
- Not listed
- Affected
- sixapart/movable type
- Source
- vultures@jpcert.or.jp
References
- http://jvn.jp/en/jp/JVN20083397/index.html
- http://jvndb.jvn.jp/jvndb/JVNDB-2012-000018
- http://www.debian.org/security/2012/dsa-2423
- http://www.movabletype.org/2012/02/movable_type_513_507_and_438_security_updates.htmlPatch, Vendor Advisory
- http://www.movabletype.org/documentation/appendices/release-notes/513.htmlPatch, Vendor Advisory
- http://www.securityfocus.com/bid/52138
- http://www.securitytracker.com/id?1026738
- http://jvn.jp/en/jp/JVN20083397/index.html
- http://jvndb.jvn.jp/jvndb/JVNDB-2012-000018
- http://www.debian.org/security/2012/dsa-2423
- http://www.movabletype.org/2012/02/movable_type_513_507_and_438_security_updates.htmlPatch, Vendor Advisory
- http://www.movabletype.org/documentation/appendices/release-notes/513.htmlPatch, Vendor Advisory
- http://www.securityfocus.com/bid/52138
- http://www.securitytracker.com/id?1026738
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.