PT-2024-30453 · Unknown · Wpforo Forum

·

CVE-2024-43288

·

Published

2024-08-18

·

Updated

2024-08-25

CVSS v3.1

8.1

High

VectorAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Name of the Vulnerable Software and Affected Versions wpForo Forum versions through 2.3.4
Description The issue is related to an Authorization Bypass Through User-Controlled Key vulnerability. This allows for potential unauthorized access. The estimated number of potentially affected devices worldwide is not specified. Details about real-world incidents where this issue was exploited are not provided.
Recommendations For versions through 2.3.4, update to version 2.3.5 to resolve the issue.

Fix

IDOR

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2024-43288

Affected Products

Wpforo Forum