2 lines
3.3 KiB
JSON
2 lines
3.3 KiB
JSON
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Awesome Support – WordPress HelpDesk & Support Plugin","vendor":"awesomesupport","versions":[{"lessThanOrEqual":"6.3.7","status":"affected","version":"0","versionType":"semver"}]}],"source":"security@wordfence.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"The Awesome Support – WordPress HelpDesk & Support Plugin plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 6.3.7. This is due to the wpas_get_ticket_replies_ajax() function failing to verify whether the authenticated user has permission to view the specific ticket being requested. This makes it possible for authenticated attackers, with subscriber-level access and above, to access sensitive information from all support tickets in the system by manipulating the ticket_id parameter."},{"lang":"es","value":"El plugin Awesome Support - WordPress HelpDesk & Support Plugin para WordPress es vulnerable a Referencia Directa Insegura a Objeto en versiones hasta la 6.3.7, inclusive. Esto se debe a que la función wpas_get_ticket_replies_ajax() no verifica si el usuario autenticado tiene permiso para ver el ticket específico solicitado. Esto permite a atacantes autenticados, con acceso de nivel de suscriptor y superior, acceder a información sensible de todos los tickets de soporte en el sistema manipulando el parámetro ticket_id."}],"id":"CVE-2026-4654","lastModified":"2026-07-25T10:10:00.167","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":5.3,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","version":"3.1"},"exploitabilityScore":3.9,"impactScore":1.4,"source":"security@wordfence.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-4654","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-04-08T18:50:01.418065Z","version":"2.0.3"}}]},"published":"2026-04-08T08:16:24.237","references":[{"source":"security@wordfence.com","url":"https://plugins.trac.wordpress.org/browser/awesome-support/tags/6.3.7/includes/functions-post.php#L1823"},{"source":"security@wordfence.com","url":"https://plugins.trac.wordpress.org/browser/awesome-support/tags/6.3.7/includes/functions-post.php#L1851"},{"source":"security@wordfence.com","url":"https://plugins.trac.wordpress.org/browser/awesome-support/trunk/includes/functions-post.php#L1823"},{"source":"security@wordfence.com","url":"https://plugins.trac.wordpress.org/browser/awesome-support/trunk/includes/functions-post.php#L1851"},{"source":"security@wordfence.com","url":"https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3497662%40awesome-support&new=3497662%40awesome-support&sfp_email=&sfph_mail="},{"source":"security@wordfence.com","url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/9f9015fa-b3f0-4312-8acd-02b715e26f33?source=cve"}],"sourceIdentifier":"security@wordfence.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-639"}],"source":"security@wordfence.com","type":"Secondary"}]}
|