Vulnerabilities > CVE-2023-35916 - Authorization Bypass Through User-Controlled Key vulnerability in Automattic Woopayments

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
HIGH
Integrity impact
NONE
Availability impact
NONE
network
low complexity
automattic
CWE-639
NVD
Published: 2023-12-20
Updated: 2023-12-29

Summary

Authorization Bypass Through User-Controlled Key vulnerability in Automattic WooPayments – Fully Integrated Solution Built and Supported by Woo.This issue affects WooPayments – Fully Integrated Solution Built and Supported by Woo: from n/a through 5.9.0.

Vulnerable Configurations

Part Description Count
Application
Automattic
106

Common Weakness Enumeration (CWE)

References