Lucene search
HistoryApr 07, 2024 - 6:15 p.m.
CVE-2024-31277
deserialization
untrusted data
pickplugins
product designer
vulnerability
8.7 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N
8.7 High
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
9.2%
Deserialization of Untrusted Data vulnerability in PickPlugins Product Designer.This issue affects Product Designer: from n/a through 1.0.32.
Related
cvelist
cvelist
wpvulndb
wpvulndb
Product Designer < 1.0.33 - Unauthenticated PHP Object Injection
2024-04-11 00:00:00
cve
cve
CVE-2024-31277
2024-04-07 18:15:10
wordfence
wordfence
8.7 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N
8.7 High
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
9.2%
Related for NVD:CVE-2024-31277