exploitDog

CVE-2024-12104

Опубликовано: 21 янв. 2025

Источник: nvd

CVSS3: 5.3

CVSS3: 7.5

EPSS Низкий

Описание

The Visual Website Collaboration, Feedback & Project Management – Atarim plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the wpf_delete_file and wpf_delete_file functions in all versions up to, and including, 4.0.9. This makes it possible for unauthenticated attackers to delete project pages and files.

Ссылки

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:atarim:visual_website_collaboration\,_feedback_\&_project_management:*:*:*:*:*:wordpress:*:*

Версия до 4.1.0 (исключая)

EPSS

Процентиль: 52%

0.00293

Низкий

5.3 Medium

CVSS3

7.5 High

CVSS3

Дефекты

CWE-862

Связанные уязвимости

GHSA-h264-cfq7-qp2r

CVSS3: 5.3

github

около 1 года назад

The Visual Website Collaboration, Feedback & Project Management – Atarim plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the wpf_delete_file and wpf_delete_file functions in all versions up to, and including, 4.0.9. This makes it possible for unauthenticated attackers to delete project pages and files.

EPSS

Процентиль: 52%

0.00293

Низкий

5.3 Medium

CVSS3

7.5 High

CVSS3

Дефекты

CWE-862