CVE-2023-47841: WordPress Analytify plugin <= 5.1.1 - Broken Access Control vulnerability

Q: What is the severity of CVE-2023-47841?

CVE-2023-47841 is classified as a high severity vulnerability due to its potential to allow unauthorized access to sensitive information.

Q: How do I fix CVE-2023-47841?

To fix CVE-2023-47841, upgrade Analytify to version 5.1.2 or later where the access control configurations have been corrected.

Q: What systems are affected by CVE-2023-47841?

CVE-2023-47841 affects Analytify versions up to and including 5.1.1.

Q: What type of vulnerability is CVE-2023-47841?

CVE-2023-47841 is a missing authorization vulnerability related to incorrectly configured access control security levels.

Q: Can CVE-2023-47841 lead to data exposure?

Yes, CVE-2023-47841 can potentially allow attackers to access restricted data, leading to unauthorized data exposure.

Published Dec 9, 2024

Updated

Missing Authorization vulnerability in Adnan Analytify wp-analytify allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Analytify: from n/a through <= 5.1.1.

Affected Software

3 affected components

Analytify Analytify<=5.1.1

WordPress Analytify<=5.1.1

Analytify Analytify - Google Analytics Dashboard Wordpress<5.2.0

Remediation

Information

Update the WordPress Analytify plugin to the latest available version (at least 5.2.0).

Event History

Dec 9, 2024

CVE Published

via MITRE·11:30 AM

Data Sourced

via MITRE·11:30 AM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·01:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2023-47841?

CVE-2023-47841 is classified as a high severity vulnerability due to its potential to allow unauthorized access to sensitive information.

How do I fix CVE-2023-47841?

To fix CVE-2023-47841, upgrade Analytify to version 5.1.2 or later where the access control configurations have been corrected.

What systems are affected by CVE-2023-47841?