CVE-2021-24374
JetPack Exposure of Resource to Wrong Sphere
Summary
JetPack Exposure of Resource to Wrong Sphere
Original description
The description as published by the source.
The Jetpack Carousel module of the JetPack WordPress plugin before 9.8 allows users to create a "carousel" type image gallery and allows users to comment on the images. A security vulnerability was found within the Jetpack Carousel module by nguyenhg_vcs that allowed the comments of non-published page/posts to be leaked.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Affected packages
Packagist
automattic/jetpack
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.8"}]}]
References
- advisory nvd.nist.gov
- package github.com
- web jetpack.com
- web wpscan.com