2 lines
3.2 KiB
JSON
2 lines
3.2 KiB
JSON
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"EventON","vendor":"Unknown","versions":[{"lessThan":"4.5.5","status":"affected","version":"0","versionType":"semver"}]},{"collectionURL":"https://wordpress.org/plugins","defaultStatus":"unaffected","product":"EventON","vendor":"Unknown","versions":[{"lessThan":"2.2.7","status":"affected","version":"0","versionType":"semver"}]}],"source":"contact@wpscan.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:myeventon:eventon:*:*:*:*:*:wordpress:*:*","matchCriteriaId":"150D2D60-69AA-4027-AC89-D3929C2C5ECA","versionEndExcluding":"2.2.7","vulnerable":true},{"criteria":"cpe:2.3:a:myeventon:eventon:*:*:*:*:*:wordpress:*:*","matchCriteriaId":"57B6B80A-D3E7-4D93-B2BA-4A823879356F","versionEndExcluding":"4.5.5","versionStartIncluding":"4.0","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"The EventON WordPress plugin before 4.5.5, EventON WordPress plugin before 2.2.7 do not have authorisation in an AJAX action, allowing unauthenticated users to retrieve the settings of arbitrary virtual events, including any meeting password set (for example for Zoom)"},{"lang":"es","value":"El complemento EventON WordPress anterior a 4.5.5 y el complemento EventON WordPress anterior a 2.2.7 no tienen autorización en una acción AJAX, lo que permite a usuarios no autenticados recuperar la configuración de eventos virtuales arbitrarios, incluida cualquier contraseña de reunión establecida (por ejemplo, para Zoom)."}],"id":"CVE-2024-0236","lastModified":"2026-06-17T06:53:03.427","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":5.3,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","version":"3.1"},"exploitabilityScore":3.9,"impactScore":1.4,"source":"nvd@nist.gov","type":"Primary"},{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":5.3,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","version":"3.1"},"exploitabilityScore":3.9,"impactScore":1.4,"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2024-0236","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2024-01-23T21:45:11.470566Z","version":"2.0.3"}}]},"published":"2024-01-16T16:15:14.367","references":[{"source":"contact@wpscan.com","tags":["Third Party Advisory"],"url":"https://wpscan.com/vulnerability/09aeb6f2-6473-4de7-8598-e417049896d7/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"url":"https://wpscan.com/vulnerability/09aeb6f2-6473-4de7-8598-e417049896d7/"}],"sourceIdentifier":"contact@wpscan.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-862"}],"source":"nvd@nist.gov","type":"Primary"}]}
|