Vulnerabilities > CVE-2023-2562 - Missing Authorization vulnerability in Gallery-Metabox Project Gallery-Metabox 1.5

047910
CVSS 0.0 - NONE
Attack vector
UNKNOWN
Attack complexity
UNKNOWN
Privileges required
UNKNOWN
Confidentiality impact
UNKNOWN
Integrity impact
UNKNOWN
Availability impact
UNKNOWN
gallery-metabox-project
CWE-862
NVD
Published: 2023-07-12
Updated: 2024-11-21

Summary

The Gallery Metabox for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the refresh_metabox function in versions up to, and including, 1.5. This makes it possible for subscriber-level attackers to obtain a list of images attached to a post.

Vulnerable Configurations

Part Description Count
Application
Gallery-Metabox_Project
2

Common Weakness Enumeration (CWE)

References