7.5 HIGH
- CVSS version: 3.1
- Attack vector (AV): NETWORK
- Attack complexity (AC): LOW
- Privileges required (PR): NONE
- User interaction (UI): NONE
- Scope (S): UNCHANGED
- Confidentiality impact (C): NONE
- Integrity impact (I): HIGH
- Availability impact (A): NONE
WordPress Sala theme <= 1.1.3 - Broken Access Control Vulnerability
Missing Authorization vulnerability in uxper Sala allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Sala: from n/a through 1.1.3.
References
Affected products
- =<1.1.3
Matching in nixpkgs
pkgs.python311Packages.datasalad
Pure-Python library with a collection of utilities for working with Git and git-annex
pkgs.python312Packages.datasalad
Pure-Python library with a collection of utilities for working with Git and git-annex
pkgs.python313Packages.datasalad
Pure-Python library with a collection of utilities for working with Git and git-annex
pkgs.python311Packages.schema-salad
Semantic Annotations for Linked Avro Data
-
nixos-unstable 8.7.20241021092521
- nixpkgs-unstable 8.7.20241021092521
- nixos-unstable-small 8.7.20241021092521
pkgs.python312Packages.schema-salad
Semantic Annotations for Linked Avro Data
-
nixos-unstable 8.8.20250205075315
- nixpkgs-unstable 8.8.20250205075315
- nixos-unstable-small 8.8.20250205075315
pkgs.python313Packages.schema-salad
Semantic Annotations for Linked Avro Data
-
nixos-unstable 8.8.20250205075315
- nixpkgs-unstable 8.8.20250205075315
- nixos-unstable-small 8.8.20250205075315
Package maintainers
-
@gador Florian Brandes <florian.brandes@posteo.de>
-
@veprbl Dmitry Kalinkin <veprbl@gmail.com>