CVE-2021-24374
JetPack Exposure of Resource to Wrong Sphere
Résumé
JetPack Exposure of Resource to Wrong Sphere
Description d'origine
La description telle que publiée par la source (souvent en anglais).
The Jetpack Carousel module of the JetPack WordPress plugin before 9.8 allows users to create a "carousel" type image gallery and allows users to comment on the images. A security vulnerability was found within the Jetpack Carousel module by nguyenhg_vcs that allowed the comments of non-published page/posts to be leaked.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Paquets affectés
Packagist
automattic/jetpack
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.8"}]}]
Références
- advisory nvd.nist.gov
- package github.com
- web jetpack.com
- web wpscan.com