Skip to content
Sign in
6.5 Medium

CVE-2023-47764 Missing Authorization vulnerability in metaphorcreations Ditty ditty-news-ticker allows Exploiting Incorrectly…

Description

Missing Authorization vulnerability in metaphorcreations Ditty ditty-news-ticker allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ditty: from n/a through <= 3.1.24.

Affected products and versions

Product Affected versions Fixed in
Ditty 3.1 earliest → 3.1.24 No fix stated
Ditty 3.1 earliest → 3.1.24 No fix stated

Other CVEs of Ditty

The 4 CVEs of Ditty →
CVE-2026-93339 Metaphor Creations Ditty (ditty-news-ticker) before 3.1.70 contains a stored cross-site scripting vulnerability that… 5.1 Medium CVE-2024-32569 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Metaphor Creations… 6.5 Medium CVE-2023-23874 Auth 6.5 Medium
Track this CVE