CVE-2014-4648 : Unspecified vulnerability in Piwigo before 2.6.3 has unknown impact and attack v

Unspecified vulnerability in Piwigo before 2.6.3 has unknown impact and attack vectors, related to a "security failure."

Published 2014-06-28 15:55:08

Updated 2014-06-30 15:22:31

Source MITRE

View at NVD, CVE.org

Products affected by CVE-2014-4648

Piwigo » Piwigo
Versions up to, including, (<=) 2.6.2
cpe:2.3:a:piwigo:piwigo:*:*:*:*:*:*:*:*
Matching versions
Piwigo » Piwigo » Version: 2.6.1
cpe:2.3:a:piwigo:piwigo:2.6.1:*:*:*:*:*:*:*
Matching versions
Piwigo » Piwigo » Version: 2.6.0
cpe:2.3:a:piwigo:piwigo:2.6.0:*:*:*:*:*:*:*
Matching versions

EPSS FAQ

0.25%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 62 %

Percentile, the proportion of vulnerabilities that are scored at or less

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
10.0	HIGH	AV:N/AC:L/Au:N/C:C/I:C/A:C	10.0	10.0	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete

http://piwigo.org/forum/viewtopic.php?id=24009

Piwigo 2.6.3 | Piwigo.org
Vendor Advisory
http://piwigo.org/releases/2.6.3

Piwigo 2.6.3 | Release note
Vendor Advisory

Jump to