PT-2023-13488 · WordPress · Booked - Appointment Booking For Wordpress

Coogee86 · Publicado 2023-12-28 · Atualizado 2024-01-04 · CVE-2022-36399

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Booked - Appointment Booking for WordPress | Calendars versions prior to 2.4.4

Description The issue is related to the exposure of sensitive information to an unauthorized actor. This can potentially lead to unauthorized access to confidential data.

Recommendations For versions prior to 2.4.4, update to version 2.4.4 or later to resolve the issue.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2022-36399

Produtos afetados

Booked - Appointment Booking For Wordpress

Referências · 5

• https://osv.dev/vulnerability/CVE-2022-36399 · Aviso do Fabricante
• https://patchstack.com/database/vulnerability/booked/wordpress-booked-plugin-2-4-unauth-appointment-data-exposure-vulnerability?_s_id=cve · Nota
• https://twitter.com/CVEnew/status/1740496367749845336 · Publicação no Twitter
• https://t.me/cvenotify/65526 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2022-36399 · Nota de Segurança