Lucene search
HistoryMay 06, 2024 - 6:15 p.m.
CVE-2024-34388
sensitive information
unauthorized actor
scribit
gdpr compliance
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
6.7 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
8.8%
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Scribit GDPR Compliance.This issue affects GDPR Compliance: from n/a through 1.2.5.
Affected configurations
Node
scribitproofreadingRange≤1.2.5
| Vendor | Product | Version | CPE |
|---|---|---|---|
| scribit | proofreading | * | cpe:2.3:a:scribit:proofreading:*:*:*:*:*:*:*:* |
CNA Affected
[
{
"collectionURL": "https://wordpress.org/plugins",
"defaultStatus": "unaffected",
"packageName": "gdpr-compliance",
"product": "GDPR Compliance",
"vendor": "Scribit",
"versions": [
{
"lessThanOrEqual": "1.2.5",
"status": "affected",
"version": "n/a",
"versionType": "custom"
}
]
}
]Related
wpvulndb
wpvulndb
GDPR Compliance <= 1.2.5 - Authenticated (Subscriber+) Information Exposure
2024-05-07 00:00:00
cvelist
cvelist
nvd
nvd
CVE-2024-34388
2024-05-06 18:15:08
wordfence
wordfence
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
6.7 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
8.8%
Related for CVE-2024-34388