Aller au contenu
en Se connecter
6.5 Moyenne

CVE-2024-2231 The allows any authenticated user to join a private group due to a missing authorization check on a function

Description

The allows any authenticated user to join a private group due to a missing authorization check on a function

Produits et versions touchés

Produit Versions touchées Corrigé en
Himer 2.1 premières → < 2.1.1 2.1.1
himer 2.1 premières → < 2.1.1 2.1.1

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de Himer

Les 7 CVE de Himer →
CVE-2024-2232 The lacks CSRF checks allowing a user to invite any user to any group (including private groups) 8.1 Élevée CVE-2024-2233 The Himer WordPress theme before 2.1.1 does not have CSRF checks in some places, which could allow attackers to make… 6.3 Moyenne CVE-2024-2234 The Himer WordPress theme before 2.1.1 does not sanitise and escape some of its Post settings, which could allow high… 6.3 Moyenne CVE-2024-2235 The Himer WordPress theme before 2.1.1 does not have CSRF checks in some places, which could allow attackers to make… 6.3 Moyenne
Suivre cette CVE