CVE-2024-0710mediumCWE-20

CVE-2024-0710: fallo de gravedad media en Gravity Wiz GP Unique ID

GP Unique ID <= 1.5.5 - Unauthenticated Form Submission Unique ID Modification

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear GP Unique ID

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

13Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 5.3epss 1.0%
The GP Unique ID plugin for WordPress is vulnerable to Unique ID Modification in all versions up to, and including, 1.5.5. This is due to insufficient input validation. This makes it possible for unauthenticated attackers to tamper with the generation of a unique ID on a form submission and replace the generated unique ID with a user-controlled one, leading to a loss of integrity in cases where the ID's uniqueness is relied upon in a security-specific context.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Productos afectados
Gravity Wiz · GP Unique ID