PT-2024-30481 · Unknown · Asset Cleanup: Page Speed Booster

Ananda Dhakal · Published 2024-11-01 · Updated 2024-11-13 · CVE-2024-43314

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Asset CleanUp: Page Speed Booster versions 1.3.9.3 and earlier

Description The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. This can lead to unauthorized access to certain assets.

Recommendations For Asset CleanUp: Page Speed Booster versions 1.3.9.3 and earlier, update to a version that contains a fix for this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2024-43314

Affected Products

Asset Cleanup: Page Speed Booster

References · 5

• https://osv.dev/vulnerability/CVE-2024-43314 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-43314 · Security Note
• https://patchstack.com/database/vulnerability/wp-asset-clean-up/wordpress-asset-cleanup-page-speed-booster-plugin-1-3-9-3-broken-access-control-vulnerability?_s_id=cve · Note
• https://twitter.com/UndercodeNews/status/1856605132449804426 · Twitter Post
• https://twitter.com/CVEnew/status/1852362905179873538 · Twitter Post