What is GHSA-5hr6-r8h6-wh22?

GHSA-5hr6-r8h6-wh22 is a security advisory published by GitHub Security Advisories with Medium severity. JetPack Exposure of Resource to Wrong Sphere

Which CVE IDs does GHSA-5hr6-r8h6-wh22 cover?

GHSA-5hr6-r8h6-wh22 covers the following CVE IDs: CVE-2021-24374. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-5hr6-r8h6-wh22?

GHSA-5hr6-r8h6-wh22 has a CVSS v3 base score of 5.3, published by GitHub Security Advisories.

Which products are affected by GHSA-5hr6-r8h6-wh22?

GHSA-5hr6-r8h6-wh22 affects 1 product, including: composer/automattic/jetpack:\u003c 9.8.

GHSA-5hr6-r8h6-wh22MediumCVSS 5.3

JetPack Exposure of Resource to Wrong Sphere

Vendor

GitHub Security Advisories

Published

May 24, 2022

Last Modified

April 23, 2024

🔗 CVE IDs covered (1)

CVE-2021-24374 →

📋 Description

The Jetpack Carousel module of the JetPack WordPress plugin before 9.8 allows users to create a "carousel" type image gallery and allows users to comment on the images. A security vulnerability was found within the Jetpack Carousel module by nguyenhg_vcs that allowed the comments of non-published page/posts to be leaked.

🎯 Affected products1

composer/automattic/jetpack:< 9.8

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2021-24374
https://jetpack.com/2021/06/01/jetpack-9-8-engage-your-audience-with-wordpress-stories/
https://wpscan.com/vulnerability/08a8a51c-49d3-4bce-b7e0-e365af1d8f33
https://github.com/advisories/GHSA-5hr6-r8h6-wh22