Описание
A business logic issue in the MStore API WordPress plugin, versions before 3.2.0, had an authentication bypass with Sign In With Apple allowing unauthenticated users to recover an authentication cookie with only an email address.
Ссылки
- Third Party Advisory
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 3.2.0 (исключая)
cpe:2.3:a:inspireui:mstore_api:*:*:*:*:*:wordpress:*:*
EPSS
Процентиль: 90%
0.05628
Низкий
9.8 Critical
CVSS3
10 Critical
CVSS2
Дефекты
CWE-287
CWE-287
Связанные уязвимости
github
больше 3 лет назад
A business logic issue in the MStore API WordPress plugin, versions before 3.2.0, had an authentication bypass with Sign In With Apple allowing unauthenticated users to recover an authentication cookie with only an email address.
EPSS
Процентиль: 90%
0.05628
Низкий
9.8 Critical
CVSS3
10 Critical
CVSS2
Дефекты
CWE-287
CWE-287