Lucene search

K
cve[email protected]CVE-2023-52147
HistoryJun 04, 2024 - 1:15 p.m.

CVE-2023-52147

2024-06-0413:15:50
CWE-200
web.nvd.nist.gov
25
cve-2023-52147
reserved
organization
individual
security problem
publicized
nvd

3.7 Low

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

7 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in All In One WP Security & Firewall Team All In One WP Security & Firewall allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects All In One WP Security & Firewall: from n/a through 5.2.4.

Affected configurations

Vulners
Node
all_in_one_wp_security_\&_firewall_teamall_in_one_wp_security_\&_firewallRange5.2.4

CNA Affected

[
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "all-in-one-wp-security-and-firewall",
    "product": "All In One WP Security & Firewall",
    "vendor": "All In One WP Security & Firewall Team",
    "versions": [
      {
        "changes": [
          {
            "at": "5.2.5",
            "status": "unaffected"
          }
        ],
        "lessThanOrEqual": "5.2.4",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  }
]

3.7 Low

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

7 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%

Related for CVE-2023-52147