Lucene search

K
nvd[email protected]NVD:CVE-2024-34820
HistoryJun 11, 2024 - 3:16 p.m.

CVE-2024-34820

2024-06-1115:16:06
CWE-862
web.nvd.nist.gov
4
cve-2024-34820
if-so plugin
missing authorization
dynamic content personalization

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

EPSS

0

Percentile

9.0%

Missing Authorization vulnerability in If So Plugin If-So Dynamic Content Personalization.This issue affects If-So Dynamic Content Personalization: from n/a through 1.7.1.

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

EPSS

0

Percentile

9.0%

Related for NVD:CVE-2024-34820