CVE-2024-43332

Missing Authorization vulnerability in Jordy Meow Photo Engine allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Photo Engine: from n/a through 6.4.0.
Configurations

Configuration 1 (hide)

cpe:2.3:a:meowapps:photo_engine:*:*:*:*:*:wordpress:*:*

History

13 Nov 2024, 01:25

Type Values Removed Values Added
Summary
  • (es) La vulnerabilidad de autorización faltante en Jordy Meow Photo Engine permite explotar niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a Photo Engine: desde n/a hasta 6.4.0.
First Time Meowapps
Meowapps photo Engine
CPE cpe:2.3:a:meowapps:photo_engine:*:*:*:*:*:wordpress:*:*
CVSS v2 : unknown
v3 : 4.3
v2 : unknown
v3 : 8.8
References () https://patchstack.com/database/vulnerability/wplr-sync/wordpress-photo-engine-plugin-6-4-0-broken-access-control-vulnerability?_s_id=cve - () https://patchstack.com/database/vulnerability/wplr-sync/wordpress-photo-engine-plugin-6-4-0-broken-access-control-vulnerability?_s_id=cve - Third Party Advisory

01 Nov 2024, 15:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-11-01 15:15

Updated : 2024-11-13 01:25


NVD link : CVE-2024-43332

Mitre link : CVE-2024-43332

CVE.ORG link : CVE-2024-43332


JSON object : View

Products Affected

meowapps

  • photo_engine
CWE
CWE-862

Missing Authorization