Lucene search

K
cve[email protected]CVE-2024-34751
HistoryMay 16, 2024 - 4:15 p.m.

CVE-2024-34751

2024-05-1616:15:08
CWE-502
web.nvd.nist.gov
25
cve-2024-34751
deserialization
untrusted data
webtoffee
order export
order import
woocommerce
vulnerability
nvd

4.4 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N

6.9 Medium

AI Score

Confidence

Low

3.2 Low

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

MULTIPLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:M/C:P/I:P/A:N

0.0004 Low

EPSS

Percentile

8.7%

Deserialization of Untrusted Data vulnerability in WebToffee Order Export & Order Import for WooCommerce.This issue affects Order Export & Order Import for WooCommerce: from n/a through 2.4.9.

VendorProductVersionCPE
webtoffeeorder_export_\&_order_import_for_woocommerce*cpe:2.3:a:webtoffee:order_export_\&_order_import_for_woocommerce:*:*:*:*:*:*:*:*

4.4 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N

6.9 Medium

AI Score

Confidence

Low

3.2 Low

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

MULTIPLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:M/C:P/I:P/A:N

0.0004 Low

EPSS

Percentile

8.7%

Related for CVE-2024-34751