Vulnerability · Published Mar 27, 2023 · Assigned by WPScan
CVE-2023-1092OAuth Single Sign On - SSO (OAuth Client) - IdP Deletion via CSRF
Medium 6.5
In plain English
A medium-severity security flaw in OAuth Single Sign On Enterprise from MiniOrange. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 39% of all known vulnerabilities).
Severity (CVSS 3.1)6.5Medium
Exploit odds (30 days)0.4%top 61.4% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
The OAuth Single Sign On Free WordPress plugin before 6.24.2, OAuth Single Sign On Standard WordPress plugin before 28.4.9, OAuth Single Sign On Premium WordPress plugin before 38.4.9 and OAuth Single Sign On Enterprise WordPress plugin before 48.4.9 do not have CSRF checks when deleting Identity Providers (IdP), which could allow attackers to make logged in admins delete arbitrary IdP via a CSRF attack
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| MiniOrange | OAuth Single Sign On Free | 0 – before 6.24.2 |
| MiniOrange | OAuth Single Sign On Standard | 0 – before 28.4.9 |
| MiniOrange | OAuth Single Sign On Premium | 0 – before 38.4.9 |
| MiniOrange | OAuth Single Sign On Enterprise | 0 – before 48.4.9 |
References
- https://wpscan.com/vulnerability/8fbf7efe-0bf2-42c6-aef1-7fcf2708b31b exploit, vdb-entry, technical-description
- https://wpscan.com/vulnerability/f6e165d9-2193-4c76-ae2d-618a739fe4fb exploit, vdb-entry, technical-description
- https://wpscan.com/vulnerability/52e29f16-b6dd-4132-9bb8-ad10bd3c39d7 exploit, vdb-entry, technical-description
- https://wpscan.com/vulnerability/5eb85df5-8aab-4f30-a401-f776a310b09c exploit, vdb-entry, technical-description