PT-2023-25379 · Woocommerce · Woocommerce Subscriptions

·

CVE-2023-35914

·

Publicado

2023-12-20

·

Atualizado

2023-12-29

CVSS v3.1

7.5

Alta

VetorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions WooCommerce Woo Subscriptions versions prior to 5.1.3
Description The issue is related to an Authorization Bypass Through User-Controlled Key vulnerability. This vulnerability affects WooCommerce Woo Subscriptions, allowing unauthorized access.
Recommendations For versions prior to 5.1.3, update to version 5.1.3 or later to resolve the issue.

Correção

IDOR

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

CVE-2023-35914

Produtos afetados

Woocommerce Subscriptions