PT-2024-12334 · Unknown · Image Gallery – Responsive Photo Gallery
István Márton
·
Published
2024-12-13
·
Updated
2024-12-15
·
CVE-2023-32585
CVSS v3.1
7.5
High
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Portfolio Gallery – Responsive Image Gallery versions 1.4.5 through 1.4.6
Portfolio Gallery – Responsive Image Gallery versions prior to 1.4.7 are not explicitly mentioned, but since 1.4.5 and 1.4.6 are affected, it can be inferred that versions prior to 1.4.5 might also be affected, however, the information provided does not explicitly state this.
Description
The issue affects the Portfolio Gallery – Responsive Image Gallery, allowing exploitation of incorrectly configured access control security levels due to a missing authorization vulnerability. This can lead to broken access control.
Recommendations
For Portfolio Gallery – Responsive Image Gallery version 1.4.5, update to the latest version to mitigate risks.
For Portfolio Gallery – Responsive Image Gallery version 1.4.6, update to the latest version to mitigate risks.
At the moment, there is no information about other versions that contains a fix for this vulnerability.
Fix
Missing Authorization
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Image Gallery – Responsive Photo Gallery