CVE-2022-3923
Last modified
CVE-2022-3923 is a medium-severity vulnerability rated 4.3/10 on the CVSS scale. The ActiveCampaign for WooCommerce WordPress plugin before 1.9.8 does not have authorisation check when cleaning up its error logs via an AJAX action, which could allow any authenticated users, such as subscriber to call it and remove error logs.. EPSS estimates a 0.48% chance of exploitation in the next 30 days.
Description
The ActiveCampaign for WooCommerce WordPress plugin before 1.9.8 does not have authorisation check when cleaning up its error logs via an AJAX action, which could allow any authenticated users, such as subscriber to call it and remove error logs.
Metrics
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Activecampaign | Activecampaign For Woocommerce | < 1.9.8 |
References
- https://wpscan.com/vulnerability/6536946a-7ebf-4f8f-9446-36ec2a2a3ad2Exploit, Third Party Advisory
- https://wpscan.com/vulnerability/6536946a-7ebf-4f8f-9446-36ec2a2a3ad2Exploit, Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2022-3923?
How severe is CVE-2022-3923?
How do I fix CVE-2022-3923?
How Strix Helps
- Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2022
- CVE-2022-39224Arr-pm is an RPM reader/writer library written in Ruby. Vers…7.8
- CVE-2022-39225Parse Server is an open source backend that can be deployed …3.1
- CVE-2022-39226Discourse is an open source discussion platform. In versions…4.3
- CVE-2022-39227python-jwt is a module for generating and verifying JSON Web…9.1
- CVE-2022-39228vantage6 is a privacy preserving federated learning infrastr…6.5
- CVE-2022-39229Grafana is an open source data visualization platform for me…4.3
- CVE-2022-39230fhir-works-on-aws-authz-smart is an implementation of the au…6.5
- CVE-2022-39231Parse Server is an open source backend that can be deployed …3.7
- CVE-2022-39232Discourse is an open source discussion platform. Starting wi…4.3
- CVE-2022-39233Tuleap is a Free & Open Source Suite to improve management o…5.4
- CVE-2022-39234GLPI stands for Gestionnaire Libre de Parc Informatique. GLP…8.8
- CVE-2022-39236Matrix Javascript SDK is the Matrix Client-Server SDK for Ja…5.3
Are you affected by CVE-2022-3923?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST