PT-2024-12328
CVE-2023-32506
·
تاريخ النشر
2024-12-13
·
تاريخ التحديث
2024-12-15
الوصف من
CVSS 3.1
6.5
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
Link Whisper Free versions 0.6.3 and earlier
Description
The issue is related to a Missing Authorization vulnerability, allowing exploitation of incorrectly configured access control security levels. This is an unauthenticated broken access control vulnerability that can be exploited by attackers, potentially exposing sensitive data. Users are urged to update to the latest version to mitigate risks.
Recommendations
For Link Whisper Free version 0.6.3 and earlier, update to the latest version immediately to secure your site and mitigate the risk of exploitation. As a temporary workaround, consider restricting access to sensitive data until the update is applied. Ensure your site is secure by updating to the latest version.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾