CVE-2023-33995

EPSS 0.11%
Veröffentlicht 13.12.2024 15:15:14
Zuletzt bearbeitet 13.12.2024 15:15:14
Quelle audit@patchstack.com
Teams Watchlist Login
Unerledigt Login

Missing Authorization vulnerability in Photo Gallery Team Photo Gallery by 10Web allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Photo Gallery by 10Web: from n/a through 1.8.15.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 4

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

10web ≫ Photo Gallery SwPlatformwordpress Version < 1.8.16

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.11%	0.301

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	4.3	2.8	1.4	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
audit@patchstack.com	4.3	2.8	1.4	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

CWE-862 Missing Authorization

The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

https://patchstack.com/database/wordpress/plugin/photo-gallery/vulnerability/wordpress-photo-gallery-by-10web-plugin-1-8-15-broken-access-control-vulnerability?_s_id=cve

Third Party Advisory

https://nvd.nist.gov/vuln/detail/CVE-2023-33995

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2023-33995

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2023-33995

EUVD