Lucene search

K
cve[email protected]CVE-2024-30481
HistoryJun 09, 2024 - 11:15 a.m.

CVE-2024-30481

2024-06-0911:15:51
web.nvd.nist.gov
22
cve-2024-30481
samuel marshall
broken access control
jch optimize

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

0.0004 Low

EPSS

Percentile

9.1%

Broken Access Control vulnerability in Samuel Marshall JCH Optimize.This issue affects JCH Optimize: from n/a through 4.0.0.

Affected configurations

Vulners
Node
samuel_marshalljch_optimizeRange4.0.0

CNA Affected

[
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "jch-optimize",
    "product": "JCH Optimize",
    "vendor": "Samuel Marshall",
    "versions": [
      {
        "changes": [
          {
            "at": "4.0.1",
            "status": "unaffected"
          }
        ],
        "lessThanOrEqual": "4.0.0",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  }
]

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

0.0004 Low

EPSS

Percentile

9.1%

Related for CVE-2024-30481