CVE-2023-25457 - Vulnerability Details - OpenCVE

Missing Authorization vulnerability in Richteam Slider Carousel – Responsive Image Slider.This issue affects Slider Carousel – Responsive Image Slider: from n/a through 1.5.1.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact Low

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Wordpress	Wordpress

No data.

No data.

References

Link	Providers
https://patchstack.com/database/vulnerability/slider-images/wordpress-slider-carousel-responsive-image-slider-plugin-1-5-0-broken-access-control-vulnerability?_s_id=cve

History

No history.

MITRE

Status: PUBLISHED

Assigner: Patchstack

Published: 2024-05-03T07:35:50.236Z

Updated: 2024-08-02T11:25:18.155Z

Reserved: 2023-02-06T12:38:05.560Z

Link: CVE-2023-25457

Vulnrichment

Updated: 2024-08-02T11:25:18.155Z

NVD

Status : Awaiting Analysis

Published: 2024-05-03T08:15:06.603

Modified: 2024-11-21T07:49:32.637

Link: CVE-2023-25457

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2023-25457", "assignerOrgId": "21595511-bba5-4825-b968-b78d1f9984a3", "state": "PUBLISHED", "assignerShortName": "Patchstack", "dateReserved": "2023-02-06T12:38:05.560Z", "datePublished": "2024-05-03T07:35:50.236Z", "dateUpdated": "2024-08-02T11:25:18.155Z"}, "containers": {"cna": {"affected": [{"collectionURL": "https://wordpress.org/plugins", "defaultStatus": "unaffected", "packageName": "slider-images", "product": "Slider Carousel \u2013 Responsive Image Slider", "vendor": "Richteam", "versions": [{"changes": [{"at": "1.5.2", "status": "unaffected"}], "lessThanOrEqual": "1.5.1", "status": "affected", "version": "n/a", "versionType": "custom"}]}], "credits": [{"lang": "en", "type": "finder", "user": "00000000-0000-4000-9000-000000000000", "value": "Rio Darmawan (Patchstack Alliance)"}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "Missing Authorization vulnerability in Richteam Slider Carousel \u2013 Responsive Image Slider.<p>This issue affects Slider Carousel \u2013 Responsive Image Slider: from n/a through 1.5.1.</p>"}], "value": "Missing Authorization vulnerability in Richteam Slider Carousel \u2013 Responsive Image Slider.This issue affects Slider Carousel \u2013 Responsive Image Slider: from n/a through 1.5.1.\n\n"}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-862", "description": "CWE-862 Missing Authorization", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "21595511-bba5-4825-b968-b78d1f9984a3", "shortName": "Patchstack", "dateUpdated": "2024-05-03T07:35:50.236Z"}, "references": [{"tags": ["vdb-entry"], "url": "https://patchstack.com/database/vulnerability/slider-images/wordpress-slider-carousel-responsive-image-slider-plugin-1-5-0-broken-access-control-vulnerability?_s_id=cve"}], "solutions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "Update to 1.5.2 or a higher version."}], "value": "Update to 1.5.2 or a higher version."}], "source": {"discovery": "EXTERNAL"}, "title": "WordPress Slider Carousel \u2013 Responsive Image Slider plugin <=1.5.1 - Broken Access Control vulnerability", "x_generator": {"engine": "Vulnogram 0.1.0-dev"}}, "adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2023-25457", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-05-03T15:01:00.978254Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-06-04T17:18:46.156Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T11:25:18.155Z"}, "title": "CVE Program Container", "references": [{"tags": ["vdb-entry", "x_transferred"], "url": "https://patchstack.com/database/vulnerability/slider-images/wordpress-slider-carousel-responsive-image-slider-plugin-1-5-0-broken-access-control-vulnerability?_s_id=cve"}]}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://patchstack.com/database/vulnerability/slider-images/wordpress-slider-carousel-responsive-image-slider-plugin-1-5-0-broken-access-control-vulnerability?_s_id=cve", "tags": ["vdb-entry", "x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T11:25:18.155Z"}}, {"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2023-25457", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-05-03T15:01:00.978254Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-05-03T15:01:13.223Z"}, "title": "CISA ADP Vulnrichment"}], "cna": {"title": "WordPress Slider Carousel \u2013 Responsive Image Slider plugin <=1.5.1 - Broken Access Control vulnerability", "source": {"discovery": "EXTERNAL"}, "credits": [{"lang": "en", "type": "finder", "user": "00000000-0000-4000-9000-000000000000", "value": "Rio Darmawan (Patchstack Alliance)"}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Richteam", "product": "Slider Carousel \u2013 Responsive Image Slider", "versions": [{"status": "affected", "changes": [{"at": "1.5.2", "status": "unaffected"}], "version": "n/a", "versionType": "custom", "lessThanOrEqual": "1.5.1"}], "packageName": "slider-images", "collectionURL": "https://wordpress.org/plugins", "defaultStatus": "unaffected"}], "solutions": [{"lang": "en", "value": "Update to 1.5.2 or a higher version.", "supportingMedia": [{"type": "text/html", "value": "Update to 1.5.2 or a higher version.", "base64": false}]}], "references": [{"url": "https://patchstack.com/database/vulnerability/slider-images/wordpress-slider-carousel-responsive-image-slider-plugin-1-5-0-broken-access-control-vulnerability?_s_id=cve", "tags": ["vdb-entry"]}], "x_generator": {"engine": "Vulnogram 0.1.0-dev"}, "descriptions": [{"lang": "en", "value": "Missing Authorization vulnerability in Richteam Slider Carousel \u2013 Responsive Image Slider.This issue affects Slider Carousel \u2013 Responsive Image Slider: from n/a through 1.5.1.\n\n", "supportingMedia": [{"type": "text/html", "value": "Missing Authorization vulnerability in Richteam Slider Carousel \u2013 Responsive Image Slider.<p>This issue affects Slider Carousel \u2013 Responsive Image Slider: from n/a through 1.5.1.</p>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-862", "description": "CWE-862 Missing Authorization"}]}], "providerMetadata": {"orgId": "21595511-bba5-4825-b968-b78d1f9984a3", "shortName": "Patchstack", "dateUpdated": "2024-05-03T07:35:50.236Z"}}}, "cveMetadata": {"cveId": "CVE-2023-25457", "state": "PUBLISHED", "dateUpdated": "2024-08-02T11:25:18.155Z", "dateReserved": "2023-02-06T12:38:05.560Z", "assignerOrgId": "21595511-bba5-4825-b968-b78d1f9984a3", "datePublished": "2024-05-03T07:35:50.236Z", "assignerShortName": "Patchstack"}, "dataVersion": "5.1"}