PT-2024-30786 · Unknown · Envira Photo Gallery

Rafie Muhammad

·

CVE-2024-43925

·

Published

2024-11-01

·

Updated

2024-11-13

CVSS v3.1

8.8

High

VectorAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Envira Photo Gallery versions 1.8.14 and earlier
Description The issue is related to a Missing Authorization vulnerability in Envira Gallery Team Envira Photo Gallery, which allows exploiting incorrectly configured access control security levels.
Recommendations For Envira Photo Gallery versions 1.8.14 and earlier, update to a version later than 1.8.14 to resolve the issue. At the moment, there is no information about other mitigation measures for this vulnerability.

Fix

Missing Authorization

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2024-43925

Affected Products

Envira Photo Gallery