CVE-2023-35037: WordPress Surfer plugin <= 1.3.2.357 - Broken Access Control vulnerability
Missing Authorization vulnerability in Surfer Surfer surferseo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Surfer: from n/a through <= 1.3.2.357.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2023-35037?
CVE-2023-35037 is considered a high severity vulnerability due to its potential for exploitation through incorrect access controls.
How do I fix CVE-2023-35037?
To fix CVE-2023-35037, update Surfer and the WordPress Surfer plugin to version 1.3.2.358 or later to ensure proper access control enforcement.
What systems are affected by CVE-2023-35037?
CVE-2023-35037 affects Surfer versions up to and including 1.3.2.357 and the WordPress Surfer plugin versions up to and including 1.3.2.357.
What type of vulnerability is CVE-2023-35037?
CVE-2023-35037 is a Missing Authorization vulnerability that allows attackers to exploit misconfigured access controls.
What are the potential consequences of exploiting CVE-2023-35037?
Exploiting CVE-2023-35037 can lead to unauthorized access to sensitive information or critical functionality in the Surfer application.