CVE-2021-24374
1 advisory.
Packagist/automattic/jetpack CVE-2021-24374: medium 5.3, EPSS 1.49%
JetPack Exposure of Resource to Wrong Sphere
Action: Upgrade automattic/jetpack to 9.8 or later.
composer require automattic/jetpack:9.8Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 9.8 | - |
Fixed versions
| 9.8 |
Sources
- osv: GHSA-5hr6-r8h6-wh22
- https://nvd.nist.gov/vuln/detail/CVE-2021-24374
- https://github.com/Automattic/jetpack-production
- https://jetpack.com/2021/06/01/jetpack-9-8-engage-your-audience-with-wordpress-stories
- https://wpscan.com/vulnerability/08a8a51c-49d3-4bce-b7e0-e365af1d8f33
CVE-2021-24374 · published · modified · JSON