Lucene search

PatchstackCVE-2023-35093

HistoryJun 22, 2023 - 12:15 p.m.

CVE-2023-35093

2023-06-2212:15:12

CWE-862

Patchstack

web.nvd.nist.gov

cve-2023-35093

broken access control

stylemixthemes masterstudy lms

wordpress plugin

online courses

education plugin

orders

nvd

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

AI Score

6.6

Confidence

High

EPSS

0.001

Percentile

24.0%

JSON

Broken Access Control vulnerability in StylemixThemes MasterStudy LMS WordPress Plugin – for Online Courses and Education plugin <= 3.0.8 versions allows any logged-in users, such as subscribers to view the “Orders” of the plugin and get the data related to the order like email, username, and more.

Affected configurations

Nvd

Vulners

Node

stylemixthemesmasterstudy_lmsRange≤3.0.8wordpress

VendorProductVersionCPE
stylemixthemesmasterstudy_lms*cpe:2.3:a:stylemixthemes:masterstudy_lms:*:*:*:*:*:wordpress:*:*

Vendor	Product	Version	CPE
stylemixthemes	masterstudy_lms	*	cpe:2.3:a:stylemixthemes:masterstudy_lms::::::wordpress::*

CNA Affected

[
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "masterstudy-lms-learning-management-system",
    "product": "MasterStudy LMS WordPress Plugin – for Online Courses and Education",
    "vendor": "StylemixThemes",
    "versions": [
      {
        "lessThanOrEqual": "3.0.8",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  }
]

References

patchstack.com/database/vulnerability/masterstudy-lms-learning-management-system/wordpress-masterstudy-lms-plugin-3-0-7-broken-access-control-vulnerability?_s_id=cve

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

AI Score

6.6

Confidence

High

EPSS

0.001

Percentile

24.0%

JSON

Related for CVE-2023-35093