Lucene search

PatchstackCVE-2023-23985

HistoryApr 24, 2024 - 11:15 a.m.

CVE-2023-23985

2024-04-2411:15:46

CWE-862

Patchstack

web.nvd.nist.gov

authorization

quiz maker

vulnerability

version 6.3.9.4

CVSS3

3.7

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N

AI Score

6.9

Confidence

Low

EPSS

Percentile

9.0%

JSON

Missing Authorization vulnerability in Quiz Maker team Quiz Maker.This issue affects Quiz Maker: from n/a through 6.3.9.4.

Affected configurations

Vulners

Vulnrichment

Node

quiz_maker_teamquiz_makerRange≤6.3.9.4wordpress

VendorProductVersionCPE
quiz_maker_teamquiz_maker*cpe:2.3:a:quiz_maker_team:quiz_maker:*:*:*:*:*:wordpress:*:*

Vendor	Product	Version	CPE
quiz_maker_team	quiz_maker	*	cpe:2.3:a:quiz_maker_team:quiz_maker::::::wordpress::*

CNA Affected

[
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "quiz-maker",
    "product": "Quiz Maker",
    "vendor": "Quiz Maker team",
    "versions": [
      {
        "changes": [
          {
            "at": "6.3.9.5",
            "status": "unaffected"
          }
        ],
        "lessThanOrEqual": "6.3.9.4",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  }
]

References

patchstack.com/database/vulnerability/quiz-maker/wordpress-quiz-maker-plugin-6-3-9-4-content-spoofing?_s_id=cve

CVSS3

3.7

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N

AI Score

6.9

Confidence

Low

EPSS

Percentile

9.0%

JSON

Related for CVE-2023-23985