2 lines
3.1 KiB
JSON
2 lines
3.1 KiB
JSON
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"EventON","vendor":"Unknown","versions":[{"lessThan":"4.5.5","status":"affected","version":"0","versionType":"semver"}]},{"collectionURL":"https://wordpress.org/plugins","defaultStatus":"unaffected","product":"EventON","vendor":"Unknown","versions":[{"lessThan":"2.2.7","status":"affected","version":"0","versionType":"semver"}]}],"source":"contact@wpscan.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:myeventon:eventon:*:*:*:*:*:wordpress:*:*","matchCriteriaId":"150D2D60-69AA-4027-AC89-D3929C2C5ECA","versionEndExcluding":"2.2.7","vulnerable":true},{"criteria":"cpe:2.3:a:myeventon:eventon:*:*:*:*:*:wordpress:*:*","matchCriteriaId":"57B6B80A-D3E7-4D93-B2BA-4A823879356F","versionEndExcluding":"4.5.5","versionStartIncluding":"4.0","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"The EventON WordPress plugin before 4.5.5, EventON WordPress plugin before 2.2.7 do not have authorisation in an AJAX action, allowing unauthenticated users to retrieve email addresses of any users on the blog"},{"lang":"es","value":"El complemento EventON WordPress anterior a 4.5.5 y el complemento EventON WordPress anterior a 2.2.7 no tienen autorización en una acción AJAX, lo que permite a los usuarios no autenticados recuperar direcciones de correo electrónico de cualquier usuario en el blog."}],"id":"CVE-2024-0235","lastModified":"2026-06-17T06:53:03.270","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":5.3,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","version":"3.1"},"exploitabilityScore":3.9,"impactScore":1.4,"source":"nvd@nist.gov","type":"Primary"},{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":5.3,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","version":"3.1"},"exploitabilityScore":3.9,"impactScore":1.4,"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2024-0235","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2024-01-16T18:36:00.591679Z","version":"2.0.3"}}]},"published":"2024-01-16T16:15:14.327","references":[{"source":"contact@wpscan.com","tags":["Third Party Advisory"],"url":"https://wpscan.com/vulnerability/e370b99a-f485-42bd-96a3-60432a15a4e9/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"url":"https://wpscan.com/vulnerability/e370b99a-f485-42bd-96a3-60432a15a4e9/"}],"sourceIdentifier":"contact@wpscan.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-862"}],"source":"nvd@nist.gov","type":"Primary"}]}
|