CVE-2024-28000

Published Aug 21, 2024

Last updated 3 months ago

CVSS critical 9.8

Overview

Description
Incorrect Privilege Assignment vulnerability in LiteSpeed Technologies LiteSpeed Cache litespeed-cache allows Privilege Escalation.This issue affects LiteSpeed Cache: from 1.9 through 6.3.0.1.
Source
audit@patchstack.com
NVD status
Awaiting Analysis

Risk scores

CVSS 3.1

Type
Secondary
Base score
9.8
Impact score
5.9
Exploitability score
3.9
Vector string
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Severity
CRITICAL

Weaknesses

audit@patchstack.com
CWE-266

Social media

Hype score
Not currently trending

  1. Actively exploited CVE : CVE-2024-28000

    @transilienceai

    12 Nov 2024

    11 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  2. Actively exploited CVE : CVE-2024-28000

    @transilienceai

    11 Nov 2024

    11 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  3. Threat Alert: LiteSpeed Cache WordPress plugin bug lets hackers get admin access CVE-2024-50550 CVE-2023-40000 CVE-2024-28000 Severity: ⚠️ Critical Maturity: 💥 Mainstream Learn more: https://t.co/LoSwPs80iG #CyberSecurity #ThreatIntel #InfoSec (1/3)

    @fletch_ai

    31 Oct 2024

    32 Impressions

    0 Retweets

    1 Like

    0 Bookmarks

    1 Reply

    0 Quotes

References