Vulnerability · Published Nov 28, 2022 · Assigned by WPScan

CVE-2022-3511Awesome Support < 6.1.2 - Subscriber+ Arbitrary Exported Tickets Download

Medium 6.5

In plain English

A medium-severity security flaw in Awesome Support from Unknown. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.8% (higher than 56% of all known vulnerabilities).

Severity (CVSS 3.1)6.5Medium

Exploit odds (30 days)0.8%top 44.0% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

The Awesome Support WordPress plugin before 6.1.2 does not ensure that the exported tickets archive to be downloaded belongs to the user making the request, allowing a low privileged user, such as subscriber to download arbitrary exported tickets via an IDOR vector

Affected products (as reported)

Vendor	Product	Versions
Unknown	Awesome Support	0 – before 6.1.2

References

https://wpscan.com/vulnerability/9e57285a-0023-4711-874c-6e7b3c2673d1 exploit, technical-description