Lucene search

K
cve[email protected]CVE-2024-32519
HistoryApr 17, 2024 - 8:15 a.m.

CVE-2024-32519

2024-04-1708:15:08
CWE-862
web.nvd.nist.gov
38
authorization bypass
gutengeek
woocommerce
vulnerability
nvd

4.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

4.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.0%

Missing Authorization vulnerability in GutenGeek GG Woo Feed for WooCommerce.This issue affects GG Woo Feed for WooCommerce: from n/a through 1.2.6.

Affected configurations

Vulners
Node
gutengeekgg_woo_feedRange1.2.6
VendorProductVersionCPE
gutengeekgg_woo_feed*cpe:2.3:a:gutengeek:gg_woo_feed:*:*:*:*:*:*:*:*

CNA Affected

[
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "gg-woo-feed",
    "product": "GG Woo Feed for WooCommerce",
    "vendor": "GutenGeek",
    "versions": [
      {
        "changes": [
          {
            "at": "1.2.7",
            "status": "unaffected"
          }
        ],
        "lessThanOrEqual": "1.2.6",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  }
]

4.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

4.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.0%

Related for CVE-2024-32519