CVE-2022-0384CWE-200

Video Conferencing with Zoom < 3.8.17 - E-mail Address Disclosure

published March 7, 2022

CVSS
—
EPSS
1%
Percentile
62.6
In the wild
Unconfirmed
What it is

The Video Conferencing with Zoom WordPress plugin before 3.8.17 does not have authorisation in its vczapi_get_wp_users AJAX action, allowing any authenticated users, such as subscriber to download the list of email addresses registered on the blog

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01005 · 62.6th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2022-03-07T08:16Z
EPSS history
Timeline
  • 07 MAR 08:16Z
    Video Conferencing with Zoom < 3.8.17 - E-mail Address Disclosure
    cvelistv5