CVE-2023-52211

2024-04-1215:15:22

CWE-862

[email protected]

web.nvd.nist.gov

cve-2023-52211

reserved

security problem

nvd

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

5.3 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.0%

JSON

Missing Authorization vulnerability in Automattic WP Job Manager.This issue affects WP Job Manager: from n/a through 2.0.0.

Affected configurations

Vulners

Node

automatticwp_super_cacheRange≤2.0.0

VendorProductVersionCPE
automatticwp_super_cache*cpe:2.3:a:automattic:wp_super_cache:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
automattic	wp_super_cache	*	cpe:2.3:a:automattic:wp_super_cache::::::::

CNA Affected

[
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "wp-job-manager",
    "product": "WP Job Manager",
    "vendor": "Automattic",
    "versions": [
      {
        "changes": [
          {
            "at": "2.1.0",
            "status": "unaffected"
          }
        ],
        "lessThanOrEqual": "2.0.0",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  }
]

References

patchstack.com/database/vulnerability/wp-job-manager/wordpress-wp-job-manager-plugin-2-0-0-unauthenticated-broken-access-control-vulnerability?_s_id=cve