PT-2024-34816 · WordPress · Otter - Gutenberg Block

Rafie Muhammad · Published 2024-11-19 · Updated 2024-11-23 · CVE-2024-51671

Positive Technologies (AI Summary)

CVSS v3.1

2.7

Low

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Otter - Gutenberg Block versions 3.0.3 and earlier

Description A Missing Authorization vulnerability in Otter - Gutenberg Block allows for exploiting incorrectly configured access control security levels. This issue is related to broken access control, which can pose significant risks. Users are urged to update to the latest version to mitigate these risks.

Recommendations For versions 3.0.3 and earlier, update to the latest version to secure your site and mitigate the risks associated with this issue. As a temporary workaround, consider restricting access to sensitive areas of the site until the update is applied.

Fix

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2024-51671

Affected Products

Otter - Gutenberg Block

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2024-51671 · Security Note
• https://patchstack.com/database/vulnerability/otter-blocks/wordpress-otter-blocks-plugin-3-0-3-broken-access-control-vulnerability?_s_id=cve · Note
• https://patchstack.com/database/Wordpress/Plugin/otter-blocks/vulnerability/wordpress-otter-blocks-plugin-3-0-3-broken-access-control-vulnerability?_s_id=cve · Note
• https://twitter.com/transilienceai/status/1860186711721918665 · Twitter Post
• https://twitter.com/CVEnew/status/1859223907309597001 · Twitter Post
• https://twitter.com/transilienceai/status/1860186703526244369 · Twitter Post