CVE-2023-38389

Name of the Vulnerable Software and Affected Versions Artbees JupiterX Core versions n/a through 3.3.8

Description The issue is related to incorrect authorization in Artbees JupiterX Core, allowing access to functionality not properly constrained by ACLs. This can be exploited by a remote attacker to impact the confidentiality, integrity, and availability of protected information. Approximately 4,731,865 results are affected, and around 180,000 Wordpress sites are infected.

Recommendations For Artbees JupiterX Core versions n/a through 3.3.8, update to a version later than 3.3.8 to resolve the issue. As a temporary workaround, consider restricting access to the vulnerable functionality until a patch is available. Avoid using the vulnerable plugin until the issue is resolved.