CVE-2024-52383

{"id": "CVE-2024-52383", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "audit@patchstack.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "published": "2024-11-14T18:15:25.673", "references": [{"url": "https://patchstack.com/database/vulnerability/ai-auto-tool/wordpress-ai-auto-tool-content-writing-assistant-plugin-2-1-2-broken-access-control-vulnerability?_s_id=cve", "source": "audit@patchstack.com"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "audit@patchstack.com", "description": [{"lang": "en", "value": "CWE-862"}]}], "descriptions": [{"lang": "en", "value": "Missing Authorization vulnerability in KCT Ai Auto Tool Content Writing Assistant (Gemini Writer, ChatGPT ) All in One allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ai Auto Tool Content Writing Assistant (Gemini Writer, ChatGPT ) All in One: from n/a through 2.1.2."}, {"lang": "es", "value": "La vulnerabilidad de autorizaci\u00f3n faltante en KCT Ai Auto Tool Content Writing Assistant (Gemini Writer, ChatGPT) All in One permite explotar los niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a Ai Auto Tool Content Writing Assistant (Gemini Writer, ChatGPT) All in One: desde n/a hasta 2.1.2."}], "lastModified": "2024-11-15T13:58:08.913", "sourceIdentifier": "audit@patchstack.com"}