CVE-2023-0812
published 2023-05-15CVE-2023-0812: The Active Directory Integration / LDAP Integration WordPress plugin before 4.1.1 does not have proper authorization or nonce values for some POST requests…
PriorityP340high7.5CVSS 3.1
AVNACLPRNUINSUCHINAN
EPSS
0.82%
52.6th percentile
The Active Directory Integration / LDAP Integration WordPress plugin before 4.1.1 does not have proper authorization or nonce values for some POST requests, leading to unauthenticated data disclosure.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| chrome_chrome | — | — | |
| miniorange | active_directory_integration_ldap_integration | < 4.1.1 | 4.1.1 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-7rw4-5qwp-72w6: The Active Directory Integration / LDAP Integration WordPress plugin before 4
ghsa_unreviewed·2023-05-15
CVE-2023-0812 [HIGH] CWE-200 GHSA-7rw4-5qwp-72w6: The Active Directory Integration / LDAP Integration WordPress plugin before 4
The Active Directory Integration / LDAP Integration WordPress plugin before 4.1.1 does not have proper authorization or nonce values for some POST requests, leading to unauthenticated data disclosure.
Chrome
Stable Channel Update for Desktop: CVE-2024-3170
vendor_chrome·2024-01-23·CVSS 8.8
CVE-2024-3170 [HIGH] Stable Channel Update for Desktop: CVE-2024-3170
Stable Channel Update for Desktop
CVE-2024-3170: Use after free in WebRTC. Reported by Anonymous on 2024-01-05 [$11000][ 1505080 ] High CVE-2024-0807: Use after free in WebAudio
Reported by Huang Xilin of Ant Group Light-Year Security Lab on 2023-11-25 [$9000][ 1484394 ] High CVE-2024-0812: Inappropriate implementation in Accessibility
Severity: high
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2023-05-15
Published