CVE-2023-3707 (activitypub) | allinfosecnews.com

Oct. 16, 2023, 8:15 p.m. |

National Vulnerability Database web.nvd.nist.gov

The ActivityPub WordPress plugin before 1.0.0 does not ensure that post contents to be displayed are public and belong to the plugin, allowing any authenticated user, such as subscriber to retrieve the content of arbitrary post (such as draft and private) via an IDOR vector. Password protected posts are not affected by this issue.

1.0.0 cve draft idor issue password plugin posts private public wordpress wordpress plugin

More from web.nvd.nist.gov / National Vulnerability Database

CVE-2023-45955 (lightstrip_firmware) 6 months ago | web.nvd.nist.gov

attackers cve denial of service issue +1

CVE-2023-40101 (android) 6 months ago | web.nvd.nist.gov

android check collapse cve +7

CVE-2023-21377 (android) 6 months ago | web.nvd.nist.gov

android bypass cve disclosure +8

CVE-2023-21380 (android) 6 months ago | web.nvd.nist.gov

android bluetooth buffer buffer overflow +9

CVE-2023-21382 (android) 6 months ago | web.nvd.nist.gov

access android check cve +11

CVE-2023-21381 (android) 6 months ago | web.nvd.nist.gov

android arbitrary code code code execution +10

CVE-2023-21385 (android) 6 months ago | web.nvd.nist.gov

android corruption cve disclosure +7

CVE-2023-21387 (android) 6 months ago | web.nvd.nist.gov

android backup bypass cve +11

CVE-2023-21389 (android) 6 months ago | web.nvd.nist.gov

android bypass check cve +10

Sr Cyber Threat Hunt Researcher

@ Peraton | Beltsville, MD, United States

View on infosec-jobs.com

Lead Consultant, Hydrogeologist

@ WSP | Chattanooga, TN, United States

View on infosec-jobs.com

Senior Security Engineer - Netskope/Proofpoint

@ Sainsbury's | London, London, United Kingdom

View on infosec-jobs.com

Senior Technical Analyst-Network Security

@ Computacenter | Bengaluru Bengaluru (Bengaluru, IN, 560025

View on infosec-jobs.com

Senior DevSecOps Engineer - Clearance Required

@ Logistics Management Institute | Remote, United States

View on infosec-jobs.com

Software Test Automation Manager - Cloud Security

@ Tenable | Israel - Office - CS

View on infosec-jobs.com