Lucene search

K
nvd[email protected]NVD:CVE-2024-0212
HistoryJan 29, 2024 - 10:15 a.m.

CVE-2024-0212

2024-01-2910:15:08
CWE-284
web.nvd.nist.gov
1
cloudflare
wordpress
plugin
vulnerability
authentication
data access
api

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

7.9 High

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

18.3%

The Cloudflare Wordpress plugin was found to be vulnerable to improper authentication. The vulnerability enables attackers with a lower privileged account to access data from the Cloudflare API.

Affected configurations

NVD
Node
cloudflarecloudflareRange<4.12.3wordpress

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

7.9 High

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

18.3%

Related for NVD:CVE-2024-0212