PT-2024-12328
CVE-2023-32506
·
Published
2024-12-13
·
Updated
2024-12-15
Description by
CVSS 3.1
6.5
MediumMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
Link Whisper Free versions 0.6.3 and earlier
Description
The issue is related to a Missing Authorization vulnerability, allowing exploitation of incorrectly configured access control security levels. This is an unauthenticated broken access control vulnerability that can be exploited by attackers, potentially exposing sensitive data. Users are urged to update to the latest version to mitigate risks.
Recommendations
For Link Whisper Free version 0.6.3 and earlier, update to the latest version immediately to secure your site and mitigate the risk of exploitation. As a temporary workaround, consider restricting access to sensitive data until the update is applied. Ensure your site is secure by updating to the latest version.
Found an issue in the description? Have something to add? Feel free to write us 👾