Lucene search

[email protected]CVE-2022-47604

HistoryApr 11, 2024 - 1:17 a.m.

CVE-2022-47604

2024-04-1101:17:17

CWE-862

[email protected]

web.nvd.nist.gov

cve-2022-47604

junkcoder

ristoniinemets

missing authorization

ajax thumbnail rebuild

4.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

6.8 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%

JSON

Missing Authorization vulnerability in junkcoder, ristoniinemets AJAX Thumbnail Rebuild.This issue affects AJAX Thumbnail Rebuild: from n/a through 1.13.

Affected configurations

Vulners

Node

junkcoder\,_ristoniinemetsajax_thumbnail_rebuildRange≤1.13

CNA Affected

[
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "ajax-thumbnail-rebuild",
    "product": "AJAX Thumbnail Rebuild",
    "vendor": "junkcoder, ristoniinemets",
    "versions": [
      {
        "changes": [
          {
            "at": "1.14",
            "status": "unaffected"
          }
        ],
        "lessThanOrEqual": "1.13",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  }
]

References

patchstack.com/database/vulnerability/ajax-thumbnail-rebuild/wordpress-ajax-thumbnail-rebuild-plugin-1-13-broken-access-control-vulnerability?_s_id=cve

4.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

6.8 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%

JSON

Related for CVE-2022-47604

cvelist1 nvd1 wordfence1