4.3Mittel

CVE-2023-39999WordPress < 6.3.2 is vulnerable to Broken Access Control

WordPress.org WordPress Veröffentlicht: (vor 3 Jahren)

Beschreibung

Exposure of Sensitive Information to an Unauthorized Actor in WordPress from 6.3 through 6.3.1, from 6.2 through 6.2.2, from 6.1 through 6.13, from 6.0 through 6.0.5, from 5.9 through 5.9.7, from 5.8 through 5.8.7, from 5.7 through 5.7.9, from 5.6 through 5.6.11, from 5.5 through 5.5.12, from 5.4 through 5.4.13, from 5.3 through 5.3.15, from 5.2 through 5.2.18, from 5.1 through 5.1.16, from 5.0 through 5.0.19, from 4.9 through 4.9.23, from 4.8 through 4.8.22, from 4.7 through 4.7.26, from 4.6 through 4.6.26, from 4.5 through 4.5.29, from 4.4 through 4.4.30, from 4.3 through 4.3.31, from 4.2 through 4.2.35, from 4.1 through 4.1.38.

Schwachstellentyp (CWE): CWE-200

Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.

Betroffene Produkte und Versionen

HerstellerProduktVersionen
WordPress.org WordPress 6.3 – ≤ 6.3.1, 6.2 – ≤ 6.2.2, 6.1 – ≤ 6.1.3, 6.0 – ≤ 6.0.5, 5.9 – ≤ 5.9.7, 5.8 – ≤ 5.8.7, 5.7 – ≤ 5.7.9, 5.6 – ≤ 5.6.11, 5.5 – ≤ 5.5.12, 5.4 – ≤ 5.4.13, 5.3 – ≤ 5.3.15, 5.2 – ≤ 5.2.18, 5.1 – ≤ 5.1.16, 5.0 – ≤ 5.0.19, 4.9 – ≤ 4.9.23, 4.8 – ≤ 4.8.22, 4.7 – ≤ 4.7.26, 4.6 – ≤ 4.6.26, 4.5 – ≤ 4.5.29, 4.4 – ≤ 4.4.30, 4.3 – ≤ 4.3.31, 4.2 – ≤ 4.2.35, 4.1 – ≤ 4.1.38

Referenzen und Patches