CVE-2023-47771

2024-06-1911:15:49

CWE-862

Patchstack

web.nvd.nist.gov

cve-2023-47771

reserved

security problem

publicized

nvd

CVSS3

8.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H

EPSS

Percentile

9.0%

JSON

Missing Authorization vulnerability in ThemePunch OHG Essential Grid.This issue affects Essential Grid: from n/a through 3.0.18.

Affected configurations

Vulners

Vulnrichment

Node

themepunch_ohgessential_gridRange≤3.0.18wordpress

VendorProductVersionCPE
themepunch_ohgessential_grid*cpe:2.3:a:themepunch_ohg:essential_grid:*:*:*:*:*:wordpress:*:*

Vendor	Product	Version	CPE
themepunch_ohg	essential_grid	*	cpe:2.3:a:themepunch_ohg:essential_grid::::::wordpress::*

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Essential Grid",
    "vendor": "ThemePunch OHG",
    "versions": [
      {
        "changes": [
          {
            "at": "3.0.19",
            "status": "unaffected"
          }
        ],
        "lessThanOrEqual": "3.0.18",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  }
]

References

patchstack.com/database/vulnerability/essential-grid/wordpress-essential-grid-plugin-3-0-18-multiple-authenticated-broken-access-control-vulnerability?_s_id=cve