Lucene search
HistoryJun 19, 2024 - 2:15 p.m.
CVE-2023-36676
missing authorization
brainstorm force spectra
vulnerability
spectra 2.6.6
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
20.0%
Missing Authorization vulnerability in Brainstorm Force Spectra.This issue affects Spectra: from n/a through 2.6.6.
Affected configurations
Node
brainstormforcespectraRange<2.6.7wordpress
| Vendor | Product | Version | CPE |
|---|---|---|---|
| brainstormforce | spectra | * | cpe:2.3:a:brainstormforce:spectra:*:*:*:*:*:wordpress:*:* |
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
20.0%
Related for NVD:CVE-2023-36676