CVE-2023-45272

EPSS 0.06%
Veröffentlicht 02.01.2025 15:15:19
Zuletzt bearbeitet 06.03.2025 16:24:25
Quelle audit@patchstack.com
Teams Watchlist Login
Unerledigt Login

Missing Authorization vulnerability in 10Web 10Web Map Builder for Google Maps allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects 10Web Map Builder for Google Maps: from n/a through 1.0.73.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 4

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

10web ≫ Map Builder For Google Maps SwPlatformwordpress Version < 1.0.74

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.06%	0.197

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	4.3	2.8	1.4	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
audit@patchstack.com	5.4	2.8	2.5	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L

CWE-862 Missing Authorization

The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

https://patchstack.com/database/wordpress/plugin/wd-google-maps/vulnerability/wordpress-10web-map-builder-for-google-maps-plugin-1-0-73-notice-dismissal-vulnerability?_s_id=cve

Third Party Advisory

https://nvd.nist.gov/vuln/detail/CVE-2023-45272

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2023-45272

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2023-45272

EUVD