Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-2562
HistoryJul 12, 2023 - 5:15 a.m.

Design/Logic Flaw

2023-07-1205:15:00
PRIOn knowledge base
www.prio-n.com
3
wordpress
gallery metabox
unauthorized access

4.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

27.6%

The Gallery Metabox for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the refresh_metabox function in versions up to, and including, 1.5. This makes it possible for subscriber-level attackers to obtain a list of images attached to a post.

CPENameOperatorVersion
gallery-metaboxle1.5

4.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

27.6%

Related for PRION:CVE-2023-2562