4.3
CVE-2023-51376
- EPSS 0.17%
- Veröffentlicht 14.06.2024 11:15:50
- Zuletzt bearbeitet 21.11.2024 08:37:59
- Quelle audit@patchstack.com
- CVE-Watchlists
- Unerledigt
LoginProjectHuddle Client Site <= 1.0.34 - Missing Authorization via ph_child_ajax_notice_handler
Missing Authorization vulnerability in Brainstorm Force ProjectHuddle Client Site.This issue affects ProjectHuddle Client Site: from n/a through 1.0.34.
Mögliche Gegenmaßnahme
SureFeedback Client Site: Update to version 1.0.35, or a newer patched version
Weitere Schwachstelleninformationen
SystemWordPress Plugin
≫
Produkt
SureFeedback Client Site
Version
*-1.0.34
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Brainstormforce ≫ Surefeedback SwPlatformwordpress Version < 1.0.35
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.17% | 0.391 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 4.3 | 2.8 | 1.4 |
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
|
| audit@patchstack.com | 4.3 | 2.8 | 1.4 |
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
|
CWE-862 Missing Authorization
The product does not perform an authorization check when an actor attempts to access a resource or perform an action.