CVE-2022-44593

Use of Less Trusted Source vulnerability in SolidWP Solid Security allows HTTP DoS.This issue affects Solid Security: from n/a through 9.3.1.

Weakness

The product has two different sources of the same data or information, but it uses the source that has less support for verification, is less trusted, or is less resistant to attack.

Affected Software

Name	Vendor	Start Version	End Version
Solid_security	Solidwp	*	9.3.2 (excluding)

https://cwe.mitre.org/data/definitions/141.html
https://cwe.mitre.org/data/definitions/142.html
https://cwe.mitre.org/data/definitions/73.html
https://cwe.mitre.org/data/definitions/76.html
https://cwe.mitre.org/data/definitions/85.html

References

https://patchstack.com/database/vulnerability/better-wp-security/wordpress-solid-security-plugin-9-3-1-ip-spoofing-leading-to-denial-of-service-vulnerability?_s_id=cve
https://patchstack.com/database/vulnerability/better-wp-security/wordpress-solid-security-plugin-9-3-1-ip-spoofing-leading-to-denial-of-service-vulnerability?_s_id=cve

NVD	https://nvd.nist.gov/vuln/detail/CVE-2022-44593
CWE	https://cwe.mitre.org/data/definitions/348.html

Use of Less Trusted Source

Weakness

Affected Software

Related Attack Patterns

References