Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-9p93-cfv4-j3g7

Опубликовано: 01 апр. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

Missing authorization vulnerability in Advanced Custom Fields versions prior to 5.12.1 and Advanced Custom Fields Pro versions prior to 5.12.1 allows a remote authenticated attacker to view the information on the database without the access permission.

Missing authorization vulnerability in Advanced Custom Fields versions prior to 5.12.1 and Advanced Custom Fields Pro versions prior to 5.12.1 allows a remote authenticated attacker to view the information on the database without the access permission.

EPSS

Процентиль: 64%
0.00476
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-862

Связанные уязвимости

CVSS3: 6.5
nvd
почти 4 года назад

Missing authorization vulnerability in Advanced Custom Fields versions prior to 5.12.1 and Advanced Custom Fields Pro versions prior to 5.12.1 allows a remote authenticated attacker to view the information on the database without the access permission.

EPSS

Процентиль: 64%
0.00476
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-862