exploitDog

CVE-2025-31618

Опубликовано: 31 мар. 2025

Источник: nvd

CVSS3: 5.3

EPSS Низкий

Описание

Missing Authorization vulnerability in Jaap Jansma Connector to CiviCRM with CiviMcRestFace allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Connector to CiviCRM with CiviMcRestFace: from n/a through 1.0.9.

Ссылки

https://patchstack.com/database/wordpress/plugin/connector-civicrm-mcrestface/vulnerability/wordpress-connector-to-civicrm-with-civimcrestface-plugin-1-0-9-broken-access-control-vulnerability?_s_id=cve

EPSS

Процентиль: 18%

0.00058

Низкий

5.3 Medium

CVSS3

Дефекты

CWE-862

Связанные уязвимости

GHSA-pvcv-83fh-wj6v

CVSS3: 5.3

github

10 месяцев назад

Missing Authorization vulnerability in Jaap Jansma Connector to CiviCRM with CiviMcRestFace allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Connector to CiviCRM with CiviMcRestFace: from n/a through 1.0.9.

EPSS

Процентиль: 18%

0.00058

Низкий

5.3 Medium

CVSS3

Дефекты

CWE-862