Vulnerability · Published Jun 21, 2021 · Assigned by WPScan

CVE-2021-24374Jetpack < 9.8 - Carousel Module Non-Published Page/Post Attachment Comment Leak

Medium 5.3

In plain English

A medium-severity authorization bypass via user-controlled key in Jetpack – WP Security, Backup, Speed, & Growth from Automattic. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.5% (higher than 74% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS NVD)5.3Medium

Exploit odds (30 days)1.5%top 25.7% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

The Jetpack Carousel module of the JetPack WordPress plugin before 9.8 allows users to create a "carousel" type image gallery and allows users to comment on the images. A security vulnerability was found within the Jetpack Carousel module by nguyenhg_vcs that allowed the comments of non-published page/posts to be leaked.

Affected packages & fixed versions

Ecosystem	Package	Fixed in	Advisory
Packagist	automattic/jetpack	9.8	GHSA-5hr6-r8h6-wh22

Affected products (as reported)

Vendor	Product	Versions
Automattic	Jetpack – WP Security, Backup, Speed, & Growth	9.8 – before 9.8

Weakness: CWE-639

References

https://wpscan.com/vulnerability/08a8a51c-49d3-4bce-b7e0-e365af1d8f33 x_refsource_CONFIRM
https://jetpack.com/2021/06/01/jetpack-9-8-engage-your-audience-with-wordpress-stories/ x_refsource_MISC