PT-2025-1496 · Wedevs · Wedevs Wp Erp

Abdi Pranata

·

CVE-2023-45765

·

Publicado

2025-01-02

·

Atualizado

2025-01-31

CVSS v3.1

4.3

Média

VetorAV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Name of the Vulnerable Software and Affected Versions weDevs WP ERP versions 1.12.6 and earlier
Description The issue is related to a missing authorization vulnerability in weDevs WP ERP, which allows exploiting incorrectly configured access control security levels.
Recommendations For weDevs WP ERP versions 1.12.6 and earlier, update to a version later than 1.12.6 to resolve the issue.

Exploit

Correção

Missing Authorization

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-862

Identificadores relacionados

CVE-2023-45765

Produtos afetados

Wedevs Wp Erp