Lucene search

K
cvelistPatchstackCVELIST:CVE-2024-43315
HistoryAug 18, 2024 - 9:32 p.m.

CVE-2024-43315 WordPress Stripe Payments For WooCommerce plugin <= 1.9.1 - Insecure Direct Object References (IDOR) vulnerability

2024-08-1821:32:22
CWE-639
Patchstack
www.cve.org
2
wordpress
woocommerce
stripe payments
idor
authorization bypass
checkout plugins

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

0

Percentile

9.5%

Authorization Bypass Through User-Controlled Key vulnerability in Checkout Plugins Stripe Payments For WooCommerce by Checkout.This issue affects Stripe Payments For WooCommerce by Checkout: from n/a through 1.9.1.

CNA Affected

[
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "checkout-plugins-stripe-woo",
    "product": "Stripe Payments For WooCommerce by Checkout",
    "vendor": "Checkout Plugins",
    "versions": [
      {
        "changes": [
          {
            "at": "1.9.2",
            "status": "unaffected"
          }
        ],
        "lessThanOrEqual": "1.9.1",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  }
]

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

0

Percentile

9.5%

Related for CVELIST:CVE-2024-43315