PT-2024-27840
CVE-2024-37935
·
تاريخ النشر
2024-08-13
·
تاريخ التحديث
2024-08-17
الوصف من
CVSS 3.1
7.5
عاليةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
WooCommerce OpenPos versions through 6.4.4
Description
The issue is related to a Missing Authorization vulnerability, which allows accessing functionality not properly constrained by ACLs. This could lead to unauthorized access.
Recommendations
For versions through 6.4.4, patch immediately and review permissions to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾