5.4
CVE-2023-45272
- EPSS 0.08%
- Veröffentlicht 02.01.2025 15:15:19
- Zuletzt bearbeitet 06.03.2025 16:24:25
- Quelle audit@patchstack.com
- CVE-Watchlists
- Unerledigt
Login10Web Map Builder for Google Maps <= 1.0.73 - Missing Authorization to Notice Dismissal
Missing Authorization vulnerability in 10Web 10Web Map Builder for Google Maps allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects 10Web Map Builder for Google Maps: from n/a through 1.0.73.
Mögliche Gegenmaßnahme
10Web Map Builder for Google Maps: Update to version 1.0.74, or a newer patched version
Weitere Schwachstelleninformationen
SystemWordPress Plugin
≫
Produkt
10Web Map Builder for Google Maps
Version
[*, 1.0.74)
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
10web ≫ Map Builder For Google Maps SwPlatformwordpress Version < 1.0.74
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.08% | 0.238 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 4.3 | 2.8 | 1.4 |
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
|
| audit@patchstack.com | 5.4 | 2.8 | 2.5 |
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
|
CWE-862 Missing Authorization
The product does not perform an authorization check when an actor attempts to access a resource or perform an action.