PT-2024-26573 · 10Web · Photo Gallery

Dhabaleshwar Das · Published 2024-06-11 · Updated 2024-06-27 · CVE-2024-35628

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Photo Gallery by 10Web versions 1.8.25 and earlier

Description A Missing Authorization issue has been identified in the Photo Gallery Team Photo Gallery by 10Web.

Recommendations For Photo Gallery by 10Web versions 1.8.25 and earlier, at the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2024-35628

Affected Products

Photo Gallery

References · 3

• https://osv.dev/vulnerability/CVE-2024-35628 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-35628 · Security Note
• https://patchstack.com/database/vulnerability/photo-gallery/wordpress-photo-gallery-by-10web-plugin-1-8-23-broken-access-control-vulnerability?_s_id=cve · Note