CVE-2023-38389

CRITICAL EXPLOITED

Artbees JupiterX Core <3.3.8 - Privilege Escalation

Title source: llm

Description

Incorrect Authorization vulnerability in Artbees JupiterX Core allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects JupiterX Core: from n/a through 3.3.8.

Exploits (1)

inthewild

poc

https://github.com/codeb0ss/cve-2023-38389-poc

View on inthewild

References (1)

[Third Party Advisory] https://patchstack.com/database/vulnerability/jupiterx-core/wordpress-jupiter-x-core-plugin-3-3-0-unauthenticated-account-takeover-vulnerability?_s_id=cve

Scores

CVSS v3 9.8

EPSS 0.1185

EPSS Percentile 93.8%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

VulnCheck KEV 2023-08-22

CWE

CWE-863

Status published

Products (1)

artbees/jupiter_x_core < 3.3.8

Published Jun 21, 2024

Tracked Since Feb 18, 2026