CVE-2023-51700

CVSS 3.1 Score 9.8 of 10 (high)

Details

Published Dec 27, 2023
Updated: Jan 4, 2024
CWE ID 502

Summary

CVE-2023-51700 is a vulnerability affecting the WP-Mobile-BankID-Integration plugin for WordPress prior to version 1.0.1. This vulnerability, classified as a Deserialization of Untrusted Data vulnerability, can be exploited by unauthorized actors who gain access to the database. This could lead to unauthorized code execution, data manipulation, or data exfiltration within the WordPress environment. To remediate this vulnerability, users of the plugin should upgrade to version 1.0.1 or later, where the serialization and deserialization of OrderResponse objects have been switched out to an array stored as JSON. Alternatively, stricter access controls on the database can be enforced to limit modifications by only trusted and authorized entities. The potential danger posed by this vulnerability is high, as it has a base severity rating of CRITICAL and impact scores of HIGH for integrity and confidentiality.

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2023-51700 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options