Lucene search

PatchstackCVE-2024-38756

HistoryAug 13, 2024 - 11:15 a.m.

CVE-2024-38756

2024-08-1311:15:16

CWE-200

Patchstack

web.nvd.nist.gov

cve-2024-38756

weblizar coming soon

sensitive information

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS

Percentile

9.5%

JSON

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Weblizar Coming Soon allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Coming Soon: from n/a through 1.6.3.

Affected configurations

Vulners

Vulnrichment

Node

weblizarresponsive_coming_soon_\&_maintenance_modeRange≤1.6.3wordpress

VendorProductVersionCPE
weblizarresponsive_coming_soon_\&_maintenance_mode*cpe:2.3:a:weblizar:responsive_coming_soon_\&_maintenance_mode:*:*:*:*:*:wordpress:*:*

Vendor	Product	Version	CPE
weblizar	responsive_coming_soon_\&_maintenance_mode	*	cpe:2.3:a:weblizar:responsive_coming_soon_\&_maintenance_mode::::::wordpress::*

CNA Affected

[
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "responsive-coming-soon-page",
    "product": "Coming Soon",
    "vendor": "Weblizar",
    "versions": [
      {
        "lessThanOrEqual": "1.6.3",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  }
]

References

patchstack.com/database/vulnerability/responsive-coming-soon-page/wordpress-coming-soon-page-responsive-coming-soon-maintenance-mode-plugin-1-6-3-sensitive-data-exposure-vulnerability?_s_id=cve

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS

Percentile

9.5%

JSON

Related for CVE-2024-38756