Vulnerabilities > CVE-2023-35914 - Authorization Bypass Through User-Controlled Key vulnerability in Automattic Woocommerce Subscriptions

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
HIGH
Integrity impact
NONE
Availability impact
NONE
network
low complexity
automattic
CWE-639

Summary

Authorization Bypass Through User-Controlled Key vulnerability in WooCommerce Woo Subscriptions.This issue affects Woo Subscriptions: from n/a through 5.1.2.

Vulnerable Configurations

Part Description Count
Application
Automattic
1