CVE-2023-46311

Опубликовано: 20 дек. 2023

Источник: nvd

CVSS3: 2.7

CVSS3: 6.5

EPSS Низкий

Описание

Authorization Bypass Through User-Controlled Key vulnerability in gVectors Team Comments – wpDiscuz.This issue affects Comments – wpDiscuz: from n/a through 7.6.3.

Ссылки

https://patchstack.com/database/vulnerability/wpdiscuz/wordpress-wpdiscuz-plugin-7-6-3-insecure-direct-object-references-idor-vulnerability?_s_id=cve
Third Party Advisory
https://patchstack.com/database/vulnerability/wpdiscuz/wordpress-wpdiscuz-plugin-7-6-3-insecure-direct-object-references-idor-vulnerability?_s_id=cve
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:gvectors:wpdiscuz:*:*:*:*:*:wordpress:*:*

Версия до 7.6.4 (исключая)

EPSS

Процентиль: 20%

0.00065

Низкий

2.7 Low

CVSS3

6.5 Medium

CVSS3

Дефекты

CWE-639

Связанные уязвимости

GHSA-v9h7-v369-359m

CVSS3: 2.7

github

около 2 лет назад

Authorization Bypass Through User-Controlled Key vulnerability in gVectors Team Comments – wpDiscuz.This issue affects Comments – wpDiscuz: from n/a through 7.6.3.

EPSS

Процентиль: 20%

0.00065

Низкий

2.7 Low

CVSS3

6.5 Medium

CVSS3

Дефекты

CWE-639