Lucene search

K
cve[email protected]CVE-2023-31234
HistoryMay 07, 2024 - 1:15 p.m.

CVE-2023-31234

2024-05-0713:15:47
CWE-862
web.nvd.nist.gov
33
cve
organization
individual
announcement
security problem
nvd

6.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

6.8 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

8.8%

Missing Authorization vulnerability in Tilda Publishing.This issue affects Tilda Publishing: from n/a through 0.3.23.

Affected configurations

Vulners
Node
tilda_publishingtilda_publishingRange0.3.23

CNA Affected

[
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "tilda-publishing",
    "product": "Tilda Publishing",
    "vendor": "Tilda Publishing",
    "versions": [
      {
        "changes": [
          {
            "at": "0.3.24",
            "status": "unaffected"
          }
        ],
        "lessThanOrEqual": "0.3.23",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  }
]

6.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

6.8 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

8.8%

Related for CVE-2023-31234