exploitDog

CVE-2022-27235

Опубликовано: 22 июл. 2022

Источник: nvd

CVSS3: 6.3

CVSS3: 8.8

EPSS Низкий

Описание

Multiple Broken Access Control vulnerabilities in Social Share Buttons by Supsystic plugin <= 2.2.3 at WordPress.

Ссылки

https://patchstack.com/database/vulnerability/social-share-buttons-by-supsystic/wordpress-social-share-buttons-by-supsystic-plugin-2-2-3-multiple-broken-access-control-vulnerabilities
Patch
Third Party Advisory
https://wordpress.org/plugins/social-share-buttons-by-supsystic/#developers
Release Notes
Third Party Advisory
https://patchstack.com/database/vulnerability/social-share-buttons-by-supsystic/wordpress-social-share-buttons-by-supsystic-plugin-2-2-3-multiple-broken-access-control-vulnerabilities
Patch
Third Party Advisory
https://wordpress.org/plugins/social-share-buttons-by-supsystic/#developers
Release Notes
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:supsystic:social_share_buttons:*:*:*:*:*:wordpress:*:*

Версия до 2.2.4 (исключая)

EPSS

Процентиль: 70%

0.00648

Низкий

6.3 Medium

CVSS3

8.8 High

CVSS3

Дефекты

CWE-264

NVD-CWE-Other

Связанные уязвимости

GHSA-58vp-q2cc-5pv6

CVSS3: 8.8

github

больше 3 лет назад

Multiple Broken Access Control vulnerabilities in Social Share Buttons by Supsystic plugin <= 2.2.3 at WordPress.

EPSS

Процентиль: 70%

0.00648

Низкий

6.3 Medium

CVSS3

8.8 High

CVSS3

Дефекты

CWE-264

NVD-CWE-Other