WordPress Integrate Google Drive plugin <= 1.1.99 - Unauthenticated Broken Access Control vulnerability
85Vexday Risk Score
Patch now. It exploitation observed by VulnCheck and has a working public exploit.
ssvc Actcvss 9.8epss 7.1%
from disclosure to weapon0 days
Published on NVDDec 9
1st PoCJul 17
VulnCheck+413d
exploitation probability
7.1%top 6% of all CVEs
observed exploitation
yesVulnCheck
2 public exploit(s)
Missing Authorization vulnerability in SoftLab Integrate Google Drive allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Integrate Google Drive: from n/a through 1.1.99.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
SoftLab · Integrate Google Drivepublic PoCs found — 2
githubgithub.com/RandomRobbieBF/CVE-2023-32117★ 6vulncheckvulncheck.com/xdb/b9fad5f1cfeeunverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.