deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-4520
Published: 2024-06-04
Description: An improper access control vulnerability exists in the gaizhenbiao/chuanhuchatgpt application, specifically in version 20240410. This vulnerability allows any user on the server to access the chat history of any other user without requiring any form of interaction between the users. Exploitation of this vulnerability could lead to data breaches, including the exposure of sensitive personal details, financial data, or confidential conversations. Additionally, it could facilitate identity theft and manipulation or fraud through the unauthorized access to users' chat histories. This issue is due to insufficient access control mechanisms in the application's handling of chat history data.
CVSS Score: 7.5 (HIGH)
CWE: CWE-862
References: https://github.com/gaizhenbiao/chuanhuchatgpt/commit/ccc7479ace5c9e1a1d9f4daf2e794ffd3865fc2b; https://huntr.com/bounties/0dd2da9f-998d-45aa-a646-97391f524000; https://huntr.com/bounties/0dd2da9f-998d-45aa-a646-97391f524000
CVE: CVE-2024-23326
Published: 2024-06-04
Description: Envoy is a cloud-native, open source edge and service proxy. A theoretical request smuggling vulnerability exists through Envoy if a server can be tricked into adding an upgrade header into a response. Per RFC https://www.rfc-editor.org/rfc/rfc7230#section-6.7 a server sends 101 when switching protocols. Envoy incorrectly accepts a 200 response from a server when requesting a protocol upgrade, but 200 does not indicate protocol switch. This opens up the possibility of request smuggling through Envoy if the server can be tricked into adding the upgrade header to the response.


CVSS Score: 5.9 (MEDIUM)
CWE: CWE-391, CWE-444
References: https://github.com/envoyproxy/envoy/security/advisories/GHSA-vcf8-7238-v74c; https://github.com/envoyproxy/envoy/security/advisories/GHSA-vcf8-7238-v74c
CVE: CVE-2024-32974
Published: 2024-06-04
Description: Envoy is a cloud-native, open source edge and service proxy. A crash was observed in `EnvoyQuicServerStream::OnInitialHeadersComplete()` with following call stack. It is a use-after-free caused by QUICHE continuing push request headers after `StopReading()` being called on the stream. As after `StopReading()`, the HCM's `ActiveStream` might have already be destroyed and any up calls from QUICHE could potentially cause use after free. 

CVSS Score: 5.9 (MEDIUM)
CWE: CWE-416, CWE-416
References: https://github.com/envoyproxy/envoy/security/advisories/GHSA-mgxp-7hhp-8299; https://github.com/envoyproxy/envoy/security/advisories/GHSA-mgxp-7hhp-8299
CVE: CVE-2024-32975
Published: 2024-06-04
Description: Envoy is a cloud-native, open source edge and service proxy. There is a crash at `QuicheDataReader::PeekVarInt62Length()`. It is caused by integer underflow in the `QuicStreamSequencerBuffer::PeekRegion()` implementation.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-191, CWE-191
References: https://github.com/envoyproxy/envoy/security/advisories/GHSA-g9mq-6v96-cpqc; https://github.com/envoyproxy/envoy/security/advisories/GHSA-g9mq-6v96-cpqc
CVE: CVE-2024-32976
Published: 2024-06-04
Description: Envoy is a cloud-native, open source edge and service proxy. Envoyproxy with a Brotli filter can get into an endless loop during decompression of Brotli data with extra input.
CVSS Score: 7.5 (HIGH)
CWE: CWE-835, CWE-835
References: https://github.com/envoyproxy/envoy/security/advisories/GHSA-7wp5-c2vq-4f8m; https://github.com/envoyproxy/envoy/security/advisories/GHSA-7wp5-c2vq-4f8m
CVE: CVE-2024-34362
Published: 2024-06-04
Description: Envoy is a cloud-native, open source edge and service proxy. There is a use-after-free in `HttpConnectionManager` (HCM) with `EnvoyQuicServerStream` that can crash Envoy. An attacker can exploit this vulnerability by sending a request without `FIN`, then a `RESET_STREAM` frame, and then after receiving the response, closing the connection.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-416, CWE-416
References: https://github.com/envoyproxy/envoy/security/advisories/GHSA-hww5-43gv-35jv; https://github.com/envoyproxy/envoy/security/advisories/GHSA-hww5-43gv-35jv
CVE: CVE-2024-34363
Published: 2024-06-04
Description: Envoy is a cloud-native, open source edge and service proxy. Due to how Envoy invoked the nlohmann JSON library, the library could throw an uncaught exception from downstream data if incomplete UTF-8 strings were serialized. The uncaught exception would cause Envoy to crash.
CVSS Score: 7.5 (HIGH)
CWE: CWE-248
References: https://github.com/envoyproxy/envoy/security/advisories/GHSA-g979-ph9j-5gg4; https://github.com/envoyproxy/envoy/security/advisories/GHSA-g979-ph9j-5gg4
CVE: CVE-2024-34364
Published: 2024-06-04
Description: Envoy is a cloud-native, open source edge and service proxy. Envoy exposed an out-of-memory (OOM) vector from the mirror response, since async HTTP client will buffer the response with an unbounded buffer.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-400, CWE-787
References: https://github.com/envoyproxy/envoy/security/advisories/GHSA-xcj3-h7vf-fw26; https://github.com/envoyproxy/envoy/security/advisories/GHSA-xcj3-h7vf-fw26
CVE: CVE-2024-4219
Published: 2024-06-04
Description: Prior to 23.2, it is possible to perform arbitrary Server-Side requests via HTTP-based connectors within BeyondInsight, resulting in a server-side request forgery vulnerability.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-918, CWE-918
References: https://www.beyondtrust.com/trust-center/security-advisories/BT24-05; https://www.beyondtrust.com/trust-center/security-advisories/BT24-05
CVE: CVE-2024-4220
Published: 2024-06-04
Description: Prior to 23.1, an information disclosure vulnerability exists within BeyondInsight which can allow an attacker to enumerate usernames.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: https://www.beyondtrust.com/trust-center/security-advisories/BT24-06; https://www.beyondtrust.com/trust-center/security-advisories/BT24-06
CVE: CVE-2022-28652
Published: 2024-06-04
Description: ~/.config/apport/settings parsing is vulnerable to "billion laughs" attack
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-776, CWE-776
References: https://ubuntu.com/security/notices/USN-5427-1; https://www.cve.org/CVERecord?id=CVE-2022-28652; https://ubuntu.com/security/notices/USN-5427-1
CVE: CVE-2022-28654
Published: 2024-06-04
Description: is_closing_session() allows users to fill up apport.log
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-770, CWE-770
References: https://ubuntu.com/security/notices/USN-5427-1; https://www.cve.org/CVERecord?id=CVE-2022-28654; https://ubuntu.com/security/notices/USN-5427-1
CVE: CVE-2022-28655
Published: 2024-06-04
Description: is_closing_session() allows users to create arbitrary tcp dbus connections
CVSS Score: 7.1 (HIGH)
CWE: CWE-770, CWE-770
References: https://ubuntu.com/security/notices/USN-5427-1; https://www.cve.org/CVERecord?id=CVE-2022-28655; https://ubuntu.com/security/notices/USN-5427-1
CVE: CVE-2022-28656
Published: 2024-06-04
Description: is_closing_session() allows users to consume RAM in the Apport process
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-770, CWE-770
References: https://ubuntu.com/security/notices/USN-5427-1; https://www.cve.org/CVERecord?id=CVE-2022-28656; https://ubuntu.com/security/notices/USN-5427-1
CVE: CVE-2022-28657
Published: 2024-06-04
Description: Apport does not disable python crash handler before entering chroot
CVSS Score: 7.8 (HIGH)
CWE: CWE-400
References: https://ubuntu.com/security/notices/USN-5427-1; https://www.cve.org/CVERecord?id=CVE-2022-28657; https://ubuntu.com/security/notices/USN-5427-1
CVE: CVE-2022-28658
Published: 2024-06-04
Description: Apport argument parsing mishandles filename splitting on older kernels resulting in argument spoofing
CVSS Score: 5.5 (MEDIUM)
References: https://ubuntu.com/security/notices/USN-5427-1; https://www.cve.org/CVERecord?id=CVE-2022-28658; https://ubuntu.com/security/notices/USN-5427-1
CVE: CVE-2024-30889
Published: 2024-06-04
Description: Cross Site Scripting vulnerability in audimex audimexEE v.15.1.2 and fixed in 15.1.3.9 allows a remote attacker to execute arbitrary code via the service, method, widget_type, request_id, payload parameters.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/robymontyz/pocs/blob/main/AudimexEE/ReflectedXSS.md; https://github.com/robymontyz/pocs/blob/main/AudimexEE/ReflectedXSS.md
CVE: CVE-2024-36121
Published: 2024-06-04
Description:  netty-incubator-codec-ohttp is the OHTTP implementation for netty. BoringSSLAEADContext keeps track of how many OHTTP responses have been sent and uses this sequence number to calculate the appropriate nonce to use with the encryption algorithm. Unfortunately, two separate errors combine which would allow an attacker to cause the sequence number to overflow and thus the nonce to repeat.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-190, CWE-200, CWE-323, CWE-190
References: https://github.com/netty/netty-incubator-codec-ohttp/blob/1ddadb6473cd3be5491d114431ed4c1a9f316001/codec-ohttp-hpke-classes-boringssl/src/main/java/io/netty/incubator/codec/hpke/boringssl/BoringSSLAEADContext.java#L112-L114; https://github.com/netty/netty-incubator-codec-ohttp/security/advisories/GHSA-g762-h86w-8749; https://github.com/netty/netty-incubator-codec-ohttp/blob/1ddadb6473cd3be5491d114431ed4c1a9f316001/codec-ohttp-hpke-classes-boringssl/src/main/java/io/netty/incubator/codec/hpke/boringssl/BoringSSLAEADContext.java#L112-L114
CVE: CVE-2024-36675
Published: 2024-06-04
Description: LyLme_spage v1.9.5 is vulnerable to Server-Side Request Forgery (SSRF) via the get_head function.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-918, CWE-918
References: https://github.com/LyLme/lylme_spage/issues/92; https://github.com/LyLme/lylme_spage/issues/92
CVE: CVE-2024-5635
Published: 2024-06-04
Description: A vulnerability was found in itsourcecode Bakery Online Ordering System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file index.php. The manipulation of the argument txtsearch leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-267091.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89, CWE-89
References: https://github.com/L1OudFd8cl09/CVE/blob/main/03_06_2024_a.md; https://vuldb.com/?ctiid.267091; https://vuldb.com/?id.267091
CVE: CVE-2020-27353
Published: 2024-06-04
Description: Rejected reason: CVE ID was once reserved, but never used.
CVE: CVE-2020-27354
Published: 2024-06-05
Description: Rejected reason: CVE ID was once reserved, but never used.
CVE: CVE-2020-27355
Published: 2024-06-05
Description: Rejected reason: CVE ID was once reserved, but never used.
CVE: CVE-2020-35153
Published: 2024-06-05
Description: Rejected reason: CVE ID was once reserved, but never used.
CVE: CVE-2020-35154
Published: 2024-06-05
Description: Rejected reason: CVE ID was once reserved, but never used.
CVE: CVE-2024-4084
Published: 2024-06-05
Description: A Server-Side Request Forgery (SSRF) vulnerability exists in the latest version of mintplex-labs/anything-llm, allowing attackers to bypass the official fix intended to restrict access to intranet IP addresses and protocols. Despite efforts to filter out intranet IP addresses starting with 192, 172, 10, and 127 through regular expressions and limit access protocols to HTTP and HTTPS, attackers can still bypass these restrictions using alternative representations of IP addresses and accessing other ports running on localhost. This vulnerability enables attackers to access any asset on the internal network, attack web services on the internal network, scan hosts on the internal network, and potentially access AWS metadata endpoints. The vulnerability is due to insufficient validation of user-supplied URLs, which can be exploited to perform SSRF attacks.
CVSS Score: 7.5 (HIGH)
CWE: CWE-918
References: https://huntr.com/bounties/bf44517e-a07d-4f54-89b4-3b05fca2a008; https://huntr.com/bounties/bf44517e-a07d-4f54-89b4-3b05fca2a008
CVE: CVE-2024-5636
Published: 2024-06-05
Description: A vulnerability was found in itsourcecode Bakery Online Ordering System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file report/index.php. The manipulation of the argument procduct leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-267092.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/L1OudFd8cl09/CVE/blob/main/03_06_2024_b.md; https://vuldb.com/?ctiid.267092; https://vuldb.com/?id.267092
CVE: CVE-2024-5317
Published: 2024-06-05
Description: The Newsletter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'np1' parameter in all versions up to, and including, 8.3.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/changeset/3095002/newsletter; https://www.wordfence.com/threat-intel/vulnerabilities/id/4876e05e-efa6-46c6-832b-9ecc42934998?source=cve; https://plugins.trac.wordpress.org/changeset/3095002/newsletter
CVE: CVE-2024-5483
Published: 2024-06-05
Description: The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.2.6.8 due to incorrect implementation of get_items_permissions_check function. This makes it possible for unauthenticated attackers to extract basic information about website users, including their emails
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://plugins.trac.wordpress.org/browser/learnpress/tags/4.2.6.8/inc/jwt/rest-api/version1/class-lp-rest-users-v1-controller.php#L130; https://www.wordfence.com/threat-intel/vulnerabilities/id/122b75d2-e882-45b9-baf1-acf847f8d60a?source=cve; https://plugins.trac.wordpress.org/browser/learnpress/tags/4.2.6.8/inc/jwt/rest-api/version1/class-lp-rest-users-v1-controller.php#L130
CVE: CVE-2024-5262
Published: 2024-06-05
Description: Files or Directories Accessible to External Parties vulnerability in smb server in ProjectDiscovery Interactsh allows remote attackers to read/write any files in the directory and subdirectories of where the victim runs interactsh-server via anonymous login.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-552, CWE-552
References: https://github.com/projectdiscovery/interactsh/pull/874; https://zuso.ai/advisory/za-2024-01; https://github.com/projectdiscovery/interactsh/pull/874
CVE: CVE-2024-34055
Published: 2024-06-05
Description: Cyrus IMAP before 3.8.3 and 3.10.x before 3.10.0-rc1 allows authenticated attackers to cause unbounded memory allocation by sending many LITERALs in a single command.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-770, CWE-770
References: https://github.com/cyrusimap/cyrus-imapd/commit/ef9e4e8314d6a06f2269af0ccf606894cc3fe489; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CJZQAE3XC2GBCE5KSTWJ5A6QYANFWGFB/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WVZHUZDU4MGTTZJRNACTMSKXLNMMRLJ6/
CVE: CVE-2024-5149
Published: 2024-06-05
Description: The BuddyForms plugin for WordPress is vulnerable to Email Verification Bypass in all versions up to, and including, 2.8.9 via the use of an insufficiently random activation code. This makes it possible for unauthenticated attackers to bypass the email verification.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-330, CWE-330
References: https://plugins.trac.wordpress.org/browser/buddyforms/tags/2.8.9/includes/wp-insert-user.php#L334; https://plugins.trac.wordpress.org/changeset/3101478/buddyforms/trunk/includes/wp-insert-user.php; https://www.wordfence.com/threat-intel/vulnerabilities/id/a5c8d361-698b-4abd-bcdd-0361d3fd10c5?source=cve
CVE: CVE-2024-1161
Published: 2024-06-05
Description: The Brizy – Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Custom Attributes for blocks in all versions up to, and including, 2.4.43 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3086506%40brizy%2Ftrunk&old=3058896%40brizy%2Ftrunk&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/2c955905-bf14-4afa-a282-0a8c74cd3b87?source=cve; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3086506%40brizy%2Ftrunk&old=3058896%40brizy%2Ftrunk&sfp_email=&sfph_mail=
CVE: CVE-2024-1940
Published: 2024-06-05
Description: The Brizy – Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via post content in all versions up to, and including, 2.4.41 due to insufficient input sanitization performed only on the client side and insufficient output escaping. This makes it possible for authenticated attackers, with contributor access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 7.1 (HIGH)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3055256%40brizy&new=3055256%40brizy&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/e056dcb5-a66b-4cd3-9a73-37f226015e09?source=cve; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3055256%40brizy&new=3055256%40brizy&sfp_email=&sfph_mail=
CVE: CVE-2024-2087
Published: 2024-06-05
Description: The Brizy – Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the form name values in all versions up to, and including, 2.4.43 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 7.2 (HIGH)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/browser/brizy/tags/2.4.41/admin/views/form-data.php#L6; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3086506%40brizy%2Ftrunk&old=3058896%40brizy%2Ftrunk&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/694d0b49-c4dd-40f0-99c9-5eb8c3c08ba9?source=cve
CVE: CVE-2024-3667
Published: 2024-06-05
Description: The Brizy – Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Link To' field of multiple widgets in all versions up to, and including, 2.4.43 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 7.4 (HIGH)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/browser/brizy/trunk/public/editor-build/282-wp/editor/js; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3086506%40brizy%2Ftrunk&old=3058896%40brizy%2Ftrunk&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/f0edfebc-bf6b-4346-9cd7-ce00007e3620?source=cve
CVE: CVE-2024-4295
Published: 2024-06-05
Description: The Email Subscribers by Icegram Express plugin for WordPress is vulnerable to SQL Injection via the ‘hash’ parameter in all versions up to, and including, 5.7.20 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://plugins.trac.wordpress.org/changeset/3090845/email-subscribers/trunk/lite/includes/db/class-es-db-lists-contacts.php; https://www.wordfence.com/threat-intel/vulnerabilities/id/641123af-1ec6-4549-a58c-0a08b4678f45?source=cve; https://plugins.trac.wordpress.org/changeset/3090845/email-subscribers/trunk/lite/includes/db/class-es-db-lists-contacts.php
CVE: CVE-2024-4886
Published: 2024-06-05
Description: The  contains an IDOR vulnerability that allows a user to comment on a private post by manipulating the ID included in the request
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-639
References: https://wpscan.com/vulnerability/76e8591f-120c-4cd7-b9a2-79f8d4d98aa8/; https://wpscan.com/vulnerability/76e8591f-120c-4cd7-b9a2-79f8d4d98aa8/
CVE: CVE-2024-1164
Published: 2024-06-05
Description: The Brizy – Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's contact form widget error message and redirect URL in all versions up to, and including, 2.4.43 due to insufficient input sanitization and output escaping on user supplied error messages. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3086506%40brizy%2Ftrunk&old=3058896%40brizy%2Ftrunk&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/9746cd9f-afb2-41b2-9e31-7c77222d9cfd?source=cve; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3086506%40brizy%2Ftrunk&old=3058896%40brizy%2Ftrunk&sfp_email=&sfph_mail=
CVE: CVE-2024-2368
Published: 2024-06-05
Description: The Mollie Forms plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.6.13. This is due to missing or incorrect nonce validation on the duplicateForm() function. This makes it possible for unauthenticated attackers to duplicate forms via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352, CWE-352
References: https://plugins.trac.wordpress.org/changeset/3097426/mollie-forms; https://www.wordfence.com/threat-intel/vulnerabilities/id/51ff10f2-4a5b-42ab-9ee2-95b036ac1c9a?source=cve; https://plugins.trac.wordpress.org/changeset/3097426/mollie-forms
CVE: CVE-2024-4088
Published: 2024-06-05
Description: The Gutenberg Blocks and Page Layouts – Attire Blocks plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the disable_fe_assets function in all versions up to, and including, 1.9.2. This makes it possible for authenticated attackers, with subscriber access or above, to change the plugin's settings. Additionally, no nonce check is performed resulting in a CSRF vulnerability.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://plugins.trac.wordpress.org/changeset/3085600/attire-blocks/trunk/admin/AttireBlocksSettings.php?old=2996841&old_path=attire-blocks%2Ftrunk%2Fadmin%2FAttireBlocksSettings.php; https://www.wordfence.com/threat-intel/vulnerabilities/id/ef47feb7-76fd-470d-ba48-55ba3c323c6d?source=cve; https://plugins.trac.wordpress.org/changeset/3085600/attire-blocks/trunk/admin/AttireBlocksSettings.php?old=2996841&old_path=attire-blocks%2Ftrunk%2Fadmin%2FAttireBlocksSettings.php