Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-2qh8-fp5p-2xx2

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

Lack of authorisation checks in the Modern Events Calendar Lite WordPress plugin, versions before 5.16.5, did not properly restrict access to the export files, allowing unauthenticated users to exports all events data in CSV or XML format for example.

Lack of authorisation checks in the Modern Events Calendar Lite WordPress plugin, versions before 5.16.5, did not properly restrict access to the export files, allowing unauthenticated users to exports all events data in CSV or XML format for example.

EPSS

Процентиль: 98%
0.59314
Средний

7.5 High

CVSS3

Дефекты

CWE-284
CWE-862
CWE-863

Связанные уязвимости

CVSS3: 7.5
nvd
почти 5 лет назад

Lack of authorisation checks in the Modern Events Calendar Lite WordPress plugin, versions before 5.16.5, did not properly restrict access to the export files, allowing unauthenticated users to exports all events data in CSV or XML format for example.

EPSS

Процентиль: 98%
0.59314
Средний

7.5 High

CVSS3

Дефекты

CWE-284
CWE-862
CWE-863