Vulnerabilities > CVE-2023-51503 - Authorization Bypass Through User-Controlled Key vulnerability in Automattic Woopayments

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
HIGH
Integrity impact
NONE
Availability impact
NONE
network
low complexity
automattic
CWE-639
NVD
Published: 2023-12-31
Updated: 2024-01-05

Summary

Authorization Bypass Through User-Controlled Key vulnerability in Automattic WooPayments – Fully Integrated Solution Built and Supported by Woo.This issue affects WooPayments – Fully Integrated Solution Built and Supported by Woo: from n/a through 6.9.2.

Vulnerable Configurations

Part Description Count
Application
Automattic
127

Common Weakness Enumeration (CWE)

References