PT-2024-33608 · Unknown · Reneecussack 3D

Stealthcopter · Published 2024-10-23 · Updated 2024-10-25 · CVE-2024-49657

Positive Technologies (AI Summary)

CVSS v3.1

7.7

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions ReneeCussack 3D Work In Progress versions 1.0.3 and earlier

Description The issue is related to missing authorization, allowing exploitation due to incorrectly configured access control security levels.

Recommendations For versions 1.0.3 and earlier, update to a version that addresses the missing authorization issue, ensuring proper configuration of access control security levels to prevent exploitation.

Fix

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2024-49657

Affected Products

Reneecussack 3D

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2024-49657 · Security Note
• https://t.me/cvedetector/8716 · Telegram Post
• https://patchstack.com/database/Wordpress/Plugin/renee-work-in-progress/vulnerability/wordpress-3d-work-in-progress-plugin-1-0-3-arbitrary-file-deletion-vulnerability?_s_id=cve · Note
• https://patchstack.com/database/vulnerability/renee-work-in-progress/wordpress-3d-work-in-progress-plugin-1-0-3-arbitrary-file-deletion-vulnerability?_s_id=cve · Note