exploitDog

CVE-2023-7068

Опубликовано: 03 янв. 2024

Источник: nvd

CVSS3: 4.3

CVSS3: 6.5

EPSS Низкий

Описание

The WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on theprint_packinglist action in all versions up to, and including, 4.3.0. This makes it possible for authenticated attackers, with subscriber-level access and above, to export orders which can contain sensitive information.

Ссылки

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:webtoffee:woocommerce_pdf_invoices\,_packing_slips\,_delivery_notes_and_shipping_labels:*:*:*:*:*:wordpress:*:*

Версия до 4.3.1 (исключая)

EPSS

Процентиль: 49%

0.00257

Низкий

4.3 Medium

CVSS3

6.5 Medium

CVSS3

Дефекты

CWE-862

Связанные уязвимости

GHSA-93mm-6jq8-8cgj

CVSS3: 4.3

github

около 2 лет назад

The WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on theprint_packinglist action in all versions up to, and including, 4.3.0. This makes it possible for authenticated attackers, with subscriber-level access and above, to export orders which can contain sensitive information.

EPSS

Процентиль: 49%

0.00257

Низкий

4.3 Medium

CVSS3

6.5 Medium

CVSS3

Дефекты

CWE-862