PT-2024-33390 · Leyka · Leyka

Trương Hữu Phúc · Published 2024-10-16 · Updated 2024-10-16 · CVE-2024-49252

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Leyka versions prior to 3.31.6

Description The issue is related to the exposure of sensitive system information to an unauthorized control sphere. This is a problem where sensitive information is accessible to unauthorized parties, potentially leading to further security issues.

Recommendations For versions prior to 3.31.6, update to a version that contains a fix for this issue, as the current version is affected by the exposure of sensitive system information. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-497

Related Identifiers

CVE-2024-49252

Affected Products

Leyka

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2024-49252 · Security Note
• https://patchstack.com/database/Wordpress/Plugin/leyka/vulnerability/wordpress-leyka-plugin-3-31-6-broken-access-control-vulnerability?_s_id=cve · Note
• https://twitter.com/CVEnew/status/1846571252347220168 · Twitter Post
• https://patchstack.com/database/vulnerability/leyka/wordpress-leyka-plugin-3-31-6-broken-access-control-vulnerability?_s_id=cve · Note
• https://t.me/cvedetector/8072 · Telegram Post