Lucene search
HistoryDec 18, 2023 - 8:15 p.m.
CVE-2023-6065
quttera
web malware scanner
wordpress
unauthorized access
detailed scan logs
security vulnerability
CVSS3
5.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
EPSS
0.001
Percentile
43.7%
The Quttera Web Malware Scanner WordPress plugin before 3.4.2.1 doesn’t restrict access to detailed scan logs, which allows a malicious actor to discover local paths and portions of the site’s code
Affected configurations
Node
qutteraquttera_web_malware_scannerRange<3.4.2.1wordpress
| Vendor | Product | Version | CPE |
|---|---|---|---|
| quttera | quttera_web_malware_scanner | * | cpe:2.3:a:quttera:quttera_web_malware_scanner:*:*:*:*:*:wordpress:*:* |
Related
nuclei
nuclei
Quttera Web Malware Scanner <= 3.4.1.48 - Sensitive Data Exposure
2024-05-16 10:29:53
wpvulndb
wpvulndb
cve
cve
CVE-2023-6065
2023-12-18 20:15:08
wpexploit
wpexploit
prion
prion
Code injection
2023-12-18 20:15:00
cvelist
cvelist
wordfence
wordfence
CVSS3
5.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
EPSS
0.001
Percentile
43.7%
Related for NVD:CVE-2023-6065