Lucene search

[email protected]CVE-2022-46839

HistoryJan 05, 2024 - 11:15 a.m.

CVE-2022-46839

2024-01-0511:15:09

CWE-434

[email protected]

web.nvd.nist.gov

cve-2022-46839

unrestricted file upload

js help desk plugin

security vulnerability

10 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

9.3 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

39.3%

JSON

Unrestricted Upload of File with Dangerous Type vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin.This issue affects JS Help Desk – Best Help Desk & Support Plugin: from n/a through 2.7.1.

Affected configurations

Vulners

NVD

Node

js_help_deskjs_help_desk_–_best_help_desk_\&_support_pluginRange≤2.7.1

CPENameOperatorVersion
wiselyhub:js_help_deskwiselyhub js help deskle2.7.1

CPE	Name	Operator	Version
wiselyhub:js_help_desk	wiselyhub js help desk	le	2.7.1

CNA Affected

[
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "js-support-ticket",
    "product": "JS Help Desk – Best Help Desk & Support Plugin",
    "vendor": "JS Help Desk",
    "versions": [
      {
        "changes": [
          {
            "at": "2.7.2",
            "status": "unaffected"
          }
        ],
        "lessThanOrEqual": "2.7.1",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  }
]

References

patchstack.com/database/vulnerability/js-support-ticket/wordpress-js-help-desk-plugin-2-7-1-arbitrary-file-upload-vulnerability?_s_id=cve

10 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

9.3 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

39.3%

JSON

Related for CVE-2022-46839

prion1 cvelist1 nvd1