Lucene search

PatchstackCVE-2023-41805

HistoryJun 19, 2024 - 1:15 p.m.

CVE-2023-41805

2024-06-1913:15:55

CWE-862

Patchstack

web.nvd.nist.gov

security candidate organization individual nvd

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

EPSS

0.001

Percentile

16.8%

JSON

Missing Authorization vulnerability in Brainstorm Force Premium Starter Templates, Brainstorm Force Starter Templates astra-sites.This issue affects Premium Starter Templates: from n/a through 3.2.5; Starter Templates: from n/a through 3.2.5.

Affected configurations

Nvd

Vulners

Node

brainstormforcestarter_templatesRange<3.2.6wordpress

VendorProductVersionCPE
brainstormforcestarter_templates*cpe:2.3:a:brainstormforce:starter_templates:*:*:*:*:*:wordpress:*:*

Vendor	Product	Version	CPE
brainstormforce	starter_templates	*	cpe:2.3:a:brainstormforce:starter_templates::::::wordpress::*

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Premium Starter Templates",
    "vendor": "Brainstorm Force",
    "versions": [
      {
        "changes": [
          {
            "at": "3.2.6",
            "status": "unaffected"
          }
        ],
        "lessThanOrEqual": "3.2.5",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  },
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "astra-sites",
    "product": "Starter Templates",
    "vendor": "Brainstorm Force",
    "versions": [
      {
        "changes": [
          {
            "at": "3.2.6",
            "status": "unaffected"
          }
        ],
        "lessThanOrEqual": "3.2.5",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  }
]

References

patchstack.com/database/vulnerability/astra-pro-sites/wordpress-premium-starter-templates-plugin-3-2-5-broken-access-control-vulnerability?_s_id=cve

patchstack.com/database/vulnerability/astra-sites/wordpress-starter-templates-plugin-3-2-5-broken-access-control-vulnerability?_s_id=cve

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

EPSS

0.001

Percentile

16.8%

JSON

Related for CVE-2023-41805