CVE-2024-4746: WordPress Netgsm plugin <= 2.9.32 - Broken Access Control + CSRF vulnerability
Missing Authorization vulnerability in netgsm Netgsm netgsm allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Netgsm: from n/a through <= 2.9.32.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
netgsmto a version that resolves this vulnerability.Fixed in 2.9.32 - Compensating control
Mitigate by correcting access control security levels in Netgsm: the issue affects Netgsm from n/a through <= 2.9.32.
Event History
Frequently Asked Questions
What is the severity of CVE-2024-4746?
CVE-2024-4746 is classified as a moderate severity vulnerability due to missing authorization controls.
Which versions are affected by CVE-2024-4746?
CVE-2024-4746 affects versions of Netgsm from n/a up to and including 2.9.16.
How do I fix CVE-2024-4746?
To mitigate CVE-2024-4746, update the Netgsm plugin to the latest version available beyond 2.9.16.
What type of vulnerability is CVE-2024-4746?
CVE-2024-4746 is a Missing Authorization vulnerability.
Where can I find more information on CVE-2024-4746?
Further details regarding CVE-2024-4746 can be obtained from vulnerability databases and security advisories related to Netgsm.