Nixpkgs security tracker
4.3 MEDIUM
- CVSS version (CVSS): 3.1
- Attack Vector (AV): Network (N)
- Attack Complexity (AC): Low (L)
- Privileges Required (PR): Low (L)
- User Interaction (UI): None (N)
- Scope (S): Unchanged (U)
- Confidentiality (C): None (N)
- Integrity (I): Low (L)
- Availability (A): None (N)
- Modified Attack Vector (MAV): Network (N)
- Modified Attack Complexity (MAC): Low (L)
- Modified Privileges Required (MPR): Low (L)
- Modified User Interaction (MUI): None (N)
- Modified Confidentiality (MC): None (N)
- Modified Scope (MS): Unchanged (U)
- Modified Integrity (MI): Low (L)
- Modified Availability (MA): None (N)
by @LeSuisse Activity log
- Created suggestion
- @LeSuisse dismissed (not in Nixpkgs)
Accelerate <= 1.5.3 - Missing Authorization to Authenticated (Subscriber+) ThemeGrill Demo Importer Plugin Installation
The Accelerate theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the enqueue_scripts() function in all versions up to, and including, 1.5.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to install and activate the ThemeGrill Demo Importer plugin.
References
Affected products
- =<1.5.3
Matching in nixpkgs
pkgs.haskellPackages.accelerate
An embedded language for accelerated array processing
pkgs.python313Packages.accelerate
Simple way to train and use PyTorch models with multi-GPU, TPU, mixed-precision
pkgs.python314Packages.accelerate
Simple way to train and use PyTorch models with multi-GPU, TPU, mixed-precision
pkgs.haskellPackages.accelerate-io
Convert between Accelerate arrays and raw pointers
pkgs.haskellPackages.accelerate-llvm
Accelerate backend component generating LLVM IR
pkgs.typstPackages.accelerated-jacow
None
pkgs.haskellPackages.colour-accelerate
Working with colours in Accelerate
pkgs.pkgsRocm.python3Packages.accelerate
Simple way to train and use PyTorch models with multi-GPU, TPU, mixed-precision
pkgs.haskellPackages.mwc-random-accelerate
Generate Accelerate arrays filled with high quality pseudorandom numbers
pkgs.python313Packages.pyopengl-accelerate
This set of C (Cython) extensions provides acceleration of common operations for slow points in PyOpenGL 3.x
pkgs.python314Packages.pyopengl-accelerate
This set of C (Cython) extensions provides acceleration of common operations for slow points in PyOpenGL 3.x
pkgs.typstPackages.accelerated-jacow_0_1_0
None
pkgs.typstPackages.accelerated-jacow_0_1_1
None
pkgs.typstPackages.accelerated-jacow_0_1_2
None
pkgs.typstPackages.accelerated-jacow_0_1_3
None
pkgs.typstPackages.accelerated-jacow_0_1_4
None
pkgs.typstPackages.accelerated-jacow_0_14_0
None
pkgs.haskellPackages.accelerate-io-serialise
Binary serialisation of Accelerate arrays using serialise
Package maintainers
-
@bcdarwin Ben Darwin <bcdarwin@gmail.com>