Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-8chj-qw3c-w355

Опубликовано: 09 фев. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 5.3

Описание

The Event Manager, Events Calendar, Events Tickets for WooCommerce – Eventin plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the export_data() function in all versions up to, and including, 3.3.50. This makes it possible for unauthenticated attackers to export event data.

The Event Manager, Events Calendar, Events Tickets for WooCommerce – Eventin plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the export_data() function in all versions up to, and including, 3.3.50. This makes it possible for unauthenticated attackers to export event data.

EPSS

Процентиль: 48%
0.00249
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-862

Связанные уязвимости

CVSS3: 5.3
nvd
почти 2 года назад

The Event Manager, Events Calendar, Events Tickets for WooCommerce – Eventin plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the export_data() function in all versions up to, and including, 3.3.50. This makes it possible for unauthenticated attackers to export event data.

EPSS

Процентиль: 48%
0.00249
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-862