CVE-2023-38389 WordPress Jupiter X Core plugin <= 3.3.8 - Unauthenticated Account Takeover vulnerability

2024-06-2115:58:28

CWE-863

Patchstack

www.cve.org

wordpress

jupiterx core

plugin

unauthenticated account takeover

incorrect authorization

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

39.3%

JSON

Incorrect Authorization vulnerability in Artbees JupiterX Core allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects JupiterX Core: from n/a through 3.3.8.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "JupiterX Core",
    "vendor": "Artbees",
    "versions": [
      {
        "changes": [
          {
            "at": "3.4.3",
            "status": "unaffected"
          }
        ],
        "lessThanOrEqual": "3.3.8",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  }
]