Lucene search

PatchstackCVE-2023-25030

HistoryJun 12, 2024 - 10:15 a.m.

CVE-2023-25030

2024-06-1210:15:23

CWE-862

Patchstack

web.nvd.nist.gov

buy me a coffee

vulnerability

authorization

missing

3.7

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

AI Score

4.7

Confidence

High

EPSS

Percentile

14.5%

JSON

Missing Authorization vulnerability in Buy Me a Coffee.This issue affects Buy Me a Coffee: from n/a through 3.7.

Affected configurations

Nvd

Vulners

Node

buymeacoffeebuy_me_a_coffeeRange<3.8wordpress

VendorProductVersionCPE
buymeacoffeebuy_me_a_coffee*cpe:2.3:a:buymeacoffee:buy_me_a_coffee:*:*:*:*:*:wordpress:*:*

Vendor	Product	Version	CPE
buymeacoffee	buy_me_a_coffee	*	cpe:2.3:a:buymeacoffee:buy_me_a_coffee::::::wordpress::*

CNA Affected

[
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "buymeacoffee",
    "product": "Buy Me a Coffee",
    "vendor": "Buy Me a Coffee",
    "versions": [
      {
        "changes": [
          {
            "at": "3.8",
            "status": "unaffected"
          }
        ],
        "lessThanOrEqual": "3.7",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  }
]

References

patchstack.com/database/vulnerability/buymeacoffee/wordpress-buy-me-a-coffee-plugin-3-7-broken-access-control-vulnerability?_s_id=cve

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

AI Score

4.7

Confidence

High

EPSS

Percentile

14.5%

JSON

Related for CVE-2023-25030