Lucene search

[email protected]CVE-2022-41619

HistoryJan 17, 2024 - 5:15 p.m.

CVE-2022-41619

2024-01-1717:15:09

CWE-862

[email protected]

web.nvd.nist.gov

cve-2022-41619

missing authorization

sedlex image zoom

image zoom

vulnerability

nvd

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

6.5 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

16.2%

JSON

Missing Authorization vulnerability in SedLex Image Zoom.This issue affects Image Zoom: from n/a through 1.8.8.

Affected configurations

Vulners

NVD

Node

sedleximage_zoomRange≤1.8.8

VendorProductVersionCPE
sedleximage_zoom*cpe:2.3:a:sedlex:image_zoom:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
sedlex	image_zoom	*	cpe:2.3:a:sedlex:image_zoom::::::::

CNA Affected

[
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "image-zoom",
    "product": "Image Zoom",
    "vendor": "SedLex",
    "versions": [
      {
        "lessThanOrEqual": "1.8.8",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  }
]

References

patchstack.com/database/vulnerability/image-zoom/wordpress-image-zoom-plugin-1-8-8-multiple-broken-access-control-vulnerabilities?_s_id=cve

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

6.5 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

16.2%

JSON

Related for CVE-2022-41619

cvelist1 prion1 nvd1 patchstack1