PT-2020-13931
CVE-2020-14205
·
تاريخ النشر
2020-12-08
·
تاريخ التحديث
2020-12-10
الوصف من
CVSS 3.1
5.3
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Name of the Vulnerable Software and Affected Versions
DiveBook plugin version 1.1.4
Description
The issue is related to improper access control in the Log Dive form of the DiveBook plugin for WordPress. It fails to perform authorization checks, which can be exploited by an attacker to manipulate the integrity of dive logs.
Recommendations
For version 1.1.4, consider disabling access to the Log Dive form until a patch is available to prevent unauthorized manipulation of dive logs.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾