CVE-2023-7252: Tickera < 3.5.2.5 - Ticket leakage through IDOR
Published Apr 22, 2024
·Updated
The Tickera WordPress plugin before 3.5.2.5 does not prevent users from leaking other users' tickets.
Affected Software
2 affected components
Tickera Tickera WordPress<3.5.2.5
Tickera WordPress plugin<3.5.2.5
Event History
Apr 22, 2024
CVE Published
via MITRE·05:00 AM
Data Sourced
via MITRE·05:00 AM
DescriptionWeakness
Data Sourced
via NVD·05:15 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2023-7252?
CVE-2023-7252 is considered to be a medium severity vulnerability due to its potential for user data exposure.
2
How do I fix CVE-2023-7252?
To mitigate CVE-2023-7252, update the Tickera WordPress plugin to version 3.5.2.5 or later.
3
What type of vulnerability is CVE-2023-7252?
CVE-2023-7252 is an information disclosure vulnerability that allows unauthorized users to view other users' ticket information.
4
Who is affected by CVE-2023-7252?
Any users of the Tickera WordPress plugin prior to version 3.5.2.5 are affected by CVE-2023-7252.
5
What is the potential impact of CVE-2023-7252?
The potential impact of CVE-2023-7252 includes unauthorized access to sensitive ticket information of other users.