JetPack Exposure of Resource to Wrong Sphere

2022-05-2419:05:47

Google

osv.dev

7.1 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

46.4%

JSON

The Jetpack Carousel module of the JetPack WordPress plugin before 9.8 allows users to create a “carousel” type image gallery and allows users to comment on the images. A security vulnerability was found within the Jetpack Carousel module by nguyenhg_vcs that allowed the comments of non-published page/posts to be leaked.

CPENameOperatorVersion
automattic/jetpackeq3.0.5
automattic/jetpackeq2.8.3
automattic/jetpackeq5.6-beta2
automattic/jetpackeq4.7.1-beta
automattic/jetpackeq9.4.2
automattic/jetpackeq8.8.1
automattic/jetpackeq8.2-beta2
automattic/jetpackeq7.4.2
automattic/jetpackeq2.8
automattic/jetpackeq4.6

Name	Operator	Version
automattic/jetpack	eq	3.0.5
automattic/jetpack	eq	2.8.3
automattic/jetpack	eq	5.6-beta2
automattic/jetpack	eq	4.7.1-beta
automattic/jetpack	eq	9.4.2
automattic/jetpack	eq	8.8.1
automattic/jetpack	eq	8.2-beta2
automattic/jetpack	eq	7.4.2
automattic/jetpack	eq	2.8
automattic/jetpack	eq	4.6