Lucene search
WpvulndbWPVDB-ID:A269A9A7-909B-46EF-B2B8-FC5CAE02D57AHistoryFeb 29, 2024 - 12:00 a.m.
LiteSpeed Cache < 5.7.0.1 - Unauthenticated CDN Status Update
2024-02-2900:00:00
wpscan.com
13
litespeed cache
unauthorized modification
data
missing authorization check
update_cdn_status function
unauthenticated attackers
cdn status
CVSS3
8.2
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
AI Score
6.7
Confidence
High
EPSS
0
Percentile
9.0%
Description The plugin is vulnerable to unauthorized modification of data due to a missing authorization check on the ‘update_cdn_status’ function, allowing unauthenticated attackers to modify the plugin’s CDN status.
Related
nvd
nvd
CVE-2023-45000
2024-04-16 18:15:10
cve
cve
CVE-2023-45000
2024-04-16 18:15:10
vulnrichment
vulnrichment
cvelist
cvelist
wordfence
wordfence
CVSS3
8.2
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
AI Score
6.7
Confidence
High
EPSS
0
Percentile
9.0%
Related for WPVDB-ID:A269A9A7-909B-46EF-B2B8-FC5CAE02D57A