Lucene search

K
cvelistPatchstackCVELIST:CVE-2024-34377
HistoryMay 06, 2024 - 6:57 p.m.

CVE-2024-34377 WordPress Video Gallery – Api Gallery, YouTube and Vimeo, Link Gallery plugin <= 1.5.3 - Broken Access Control vulnerability

2024-05-0618:57:07
CWE-862
Patchstack
www.cve.org
4
wordpress
video gallery
api
youtube
vimeo
link gallery
broken access control
missing authorization
vulnerability

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

AI Score

5.4

Confidence

High

EPSS

0

Percentile

9.0%

Missing Authorization vulnerability in A WP Life Video Gallery – Api Gallery, YouTube and Vimeo, Link Gallery.This issue affects Video Gallery – Api Gallery, YouTube and Vimeo, Link Gallery: from n/a through 1.5.3.

CNA Affected

[
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "new-video-gallery",
    "product": "Video Gallery – Api Gallery, YouTube and Vimeo, Link Gallery",
    "vendor": "A WP Life",
    "versions": [
      {
        "changes": [
          {
            "at": "1.5.4",
            "status": "unaffected"
          }
        ],
        "lessThanOrEqual": "1.5.3",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  }
]

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

AI Score

5.4

Confidence

High

EPSS

0

Percentile

9.0%

Related for CVELIST:CVE-2024-34377