CVE-2024-38742

NVD Published Date: August 13, 2024 at 11:15 AM

NVD Last Modified: August 13, 2024 at 12:58 PM

Download Patch

Vulnerability ID

CVE-2024-38742

Severity

None

Severity Score

None

Summary

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in MBE Worldwide S.P.A. MBE eShip allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects MBE eShip: from n/a through 2.1.2.

References

https://patchstack.com/database/vulnerability/mail-boxes-etc/wordpress-mbe-eship-plugin-2-1-2-sensitive-data-exposure-vulnerability?_s_id=cve

Mitigation and Patches

Exploits

Metasploit Payload

Vector

None

CWE ID

CWE-200

Recent Publish

CVE-2024-43129

CVE-2024-38747

CVE-2024-38787

CVE-2024-38749

CVE-2024-40697

CVE-2024-43131

See SecOps Solution
in action

Schedule Demo

Agentless security for your infrastructure and applications - to build faster, more securely and in a fraction of the operational cost of other solutions

CVE-2024-38742

Recent Publish

See SecOps Solution
in action

Products

Compare

Company

Resources

Try It

CVE-2024-38742

Recent Publish

See SecOps Solutionin action

Products

Compare

Company

Resources

Try It

See SecOps Solution
in action