Lucene search
HistoryMay 14, 2024 - 3:39 p.m.
CVE-2024-34433
cve-2024-34433
untrusted data
ocdi
one click demo import
security vulnerability
deserialization
4.4 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
HIGH
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
5.2 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
9.1%
Deserialization of Untrusted Data vulnerability in OCDI One Click Demo Import.This issue affects One Click Demo Import: from n/a through 3.2.0.
Related
cvelist
cvelist
vulnrichment
vulnrichment
wpvulndb
wpvulndb
One Click Demo Import < 3.2.1 - Authenticated (Admin+) PHP Object Injection
2024-05-17 00:00:00
cve
cve
CVE-2024-34433
2024-05-14 15:39:03
wordfence
wordfence
4.4 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
HIGH
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
5.2 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
9.1%
Related for NVD:CVE-2024-34433