Lucene search

WPScanCVE-2023-5352

HistoryNov 06, 2023 - 9:15 p.m.

CVE-2023-5352

2023-11-0621:15:09

CWE-863

WPScan

web.nvd.nist.gov

cve-2023-5352

awesome support

wordpress plugin

unauthorized access

post editing

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

AI Score

4.6

Confidence

High

EPSS

Percentile

14.0%

JSON

The Awesome Support WordPress plugin before 6.1.5 does not correctly authorize the wpas_edit_reply function, allowing users to edit posts for which they do not have permission.

Affected configurations

Nvd

Vulners

Node

getawesomesupportawesome_supportRange<6.1.5wordpress

VendorProductVersionCPE
getawesomesupportawesome_support*cpe:2.3:a:getawesomesupport:awesome_support:*:*:*:*:*:wordpress:*:*

Vendor	Product	Version	CPE
getawesomesupport	awesome_support	*	cpe:2.3:a:getawesomesupport:awesome_support::::::wordpress::*

CNA Affected

[
  {
    "vendor": "Unknown",
    "product": "Awesome Support",
    "versions": [
      {
        "status": "affected",
        "versionType": "custom",
        "version": "0",
        "lessThan": "6.1.5"
      }
    ],
    "defaultStatus": "unaffected",
    "collectionURL": "https://wordpress.org/plugins"
  }
]

References

wpscan.com/vulnerability/d32b2136-d923-4f36-bd76-af4578deb23b

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

AI Score

4.6

Confidence

High

EPSS

Percentile

14.0%

JSON

Related for CVE-2023-5352