Lucene search

PatchstackCVE-2024-24715

HistoryMay 17, 2024 - 9:15 a.m.

CVE-2024-24715

2024-05-1709:15:22

CWE-1284

Patchstack

web.nvd.nist.gov

cve-2024-24715

reserved

security problem

announcement

nvd

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

AI Score

6.8

Confidence

High

EPSS

Percentile

9.0%

JSON

Improper Validation of Specified Quantity in Input vulnerability in The Events Calendar BookIt allows Manipulating Hidden Fields.This issue affects BookIt: from n/a through 2.4.0.

Affected configurations

Vulners

Vulnrichment

Node

the_events_calendarbookitRange≤2.4.0wordpress

VendorProductVersionCPE
the_events_calendarbookit*cpe:2.3:a:the_events_calendar:bookit:*:*:*:*:*:wordpress:*:*

Vendor	Product	Version	CPE
the_events_calendar	bookit	*	cpe:2.3:a:the_events_calendar:bookit::::::wordpress::*

CNA Affected

[
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "bookit",
    "product": "BookIt",
    "vendor": "The Events Calendar",
    "versions": [
      {
        "changes": [
          {
            "at": "2.4.2",
            "status": "unaffected"
          }
        ],
        "lessThanOrEqual": "2.4.0",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  }
]

References

patchstack.com/database/vulnerability/bookit/wordpress-wordpress-bookit-plugin-plugin-2-4-0-price-bypass-vulnerability-vulnerability?_s_id=cve

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

AI Score

6.8

Confidence

High

EPSS

Percentile

9.0%

JSON

Related for CVE-2024-24715