CVE-2023-47770

2024-06-1912:15:11

CWE-862

Patchstack

web.nvd.nist.gov

105

cve-2023-47770

security problem

organization

individual

nvd

CVSS3

7.6

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H

EPSS

Percentile

9.0%

JSON

Missing Authorization vulnerability in Muffin Group Betheme.This issue affects Betheme: from n/a through 27.1.1.

Affected configurations

Vulners

Node

muffin_groupbethemeRange≤27.1.1wordpress

VendorProductVersionCPE
muffin_groupbetheme*cpe:2.3:a:muffin_group:betheme:*:*:*:*:*:wordpress:*:*

Vendor	Product	Version	CPE
muffin_group	betheme	*	cpe:2.3:a:muffin_group:betheme::::::wordpress::*

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Betheme",
    "vendor": "Muffin Group",
    "versions": [
      {
        "changes": [
          {
            "at": "27.1.2",
            "status": "unaffected"
          }
        ],
        "lessThanOrEqual": "27.1.1",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  }
]