CVE-2021-4352

Опубликовано: 07 июн. 2023

Источник: nvd

CVSS3: 5.3

EPSS Низкий

Описание

The JobSearch WP Job Board plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the save_locsettings function in versions up to, and including, 1.8.1. This makes it possible for unauthenticated attackers to change the settings of the plugin.

Ссылки

https://blog.nintechnet.com/wordpress-jobsearch-wp-job-board-plugin-fixed-vulnerability/
Exploit
https://wpscan.com/vulnerability/ed7e664e-5a73-4d2d-a599-a0be89d6c2d1
Third Party Advisory
https://www.wordfence.com/threat-intel/vulnerabilities/id/59170f0a-975e-487c-bdb0-585c802b3127?source=cve
Third Party Advisory
https://blog.nintechnet.com/wordpress-jobsearch-wp-job-board-plugin-fixed-vulnerability/
Exploit
https://wpscan.com/vulnerability/ed7e664e-5a73-4d2d-a599-a0be89d6c2d1
Third Party Advisory
https://www.wordfence.com/threat-intel/vulnerabilities/id/59170f0a-975e-487c-bdb0-585c802b3127?source=cve
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:eyecix:jobsearch_wp_job_board:*:*:*:*:*:wordpress:*:*

Версия до 1.8.1 (включая)

EPSS

Процентиль: 32%

0.00121

Низкий

5.3 Medium

CVSS3

Дефекты

CWE-863

Связанные уязвимости

GHSA-mhgq-65r2-56r4