Lucene search

K
cvePatchstackCVE-2024-37504
HistoryJul 10, 2024 - 6:15 p.m.

CVE-2024-37504

2024-07-1018:15:04
CWE-200
Patchstack
web.nvd.nist.gov
26
vulnerability
ninja team filebird
information exposure
unauthorized access

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS

0

Percentile

9.3%

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Ninja Team FileBird Document Library.This issue affects FileBird Document Library: from n/a through 2.0.6.

Affected configurations

Vulners
Vulnrichment
Node
ninja_teamfilebird_document_libraryRange2.0.6
VendorProductVersionCPE
ninja_teamfilebird_document_library*cpe:2.3:a:ninja_team:filebird_document_library:*:*:*:*:*:*:*:*

CNA Affected

[
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "filebird-document-library",
    "product": "FileBird Document Library",
    "vendor": "Ninja Team",
    "versions": [
      {
        "changes": [
          {
            "at": "2.0.8.1",
            "status": "unaffected"
          }
        ],
        "lessThanOrEqual": "2.0.6",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  }
]

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS

0

Percentile

9.3%

Related for CVE-2024-37504