ghsa-x54p-439w-h3mq
Vulnerability from github
Published
2024-09-05 06:31
Modified
2024-09-05 15:33
Severity
Details

The Chatbot with ChatGPT WordPress plugin before 2.4.5 does not validate access on some REST routes, allowing for an unauthenticated user to purge error and chat logs

Show details on source website


{
  "affected": [],
  "aliases": [
    "CVE-2024-6846"
  ],
  "database_specific": {
    "cwe_ids": [],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2024-09-05T06:15:03Z",
    "severity": "MODERATE"
  },
  "details": "The Chatbot with ChatGPT WordPress plugin before 2.4.5 does not validate access on some REST routes, allowing for an unauthenticated user to purge error and chat logs",
  "id": "GHSA-x54p-439w-h3mq",
  "modified": "2024-09-05T15:33:35Z",
  "published": "2024-09-05T06:31:35Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-6846"
    },
    {
      "type": "WEB",
      "url": "https://wpscan.com/vulnerability/d48fdab3-669c-4870-a2f9-6c39a7c25fd8"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
      "type": "CVSS_V3"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.


Loading...

Loading...