« Volver al listado

CVE-2025-66105

Estado: AplazadaMedia (5.3)—

Missing Authorization vulnerability in Magepeople inc. Bus Ticket Booking with Seat Reservation allows Exploiting Incorrectly Configured Access Control Security Levels.

This issue affects Bus Ticket Booking with Seat Reservation: from n/a before 5.6.8.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

Mage-people — BUS Ticket Booking With Seat ReservationAI

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2025-66105",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2025-66105",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "yes"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2026-05-07T13:03:56.558991Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "audit@patchstack.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 5.3,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
          "integrityImpact": "LOW",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 1.4,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "audit@patchstack.com",
      "affectedData": [
        {
          "vendor": "Magepeople inc.",
          "product": "Bus Ticket Booking with Seat Reservation",
          "versions": [
            {
              "status": "affected",
              "changes": [
                {
                  "at": "5.6.8",
                  "status": "unaffected"
                }
              ],
              "version": "n/a",
              "lessThan": "5.6.8",
              "versionType": "custom"
            }
          ],
          "packageName": "bus-ticket-booking-with-seat-reservation",
          "collectionURL": "https://wordpress.org/plugins",
          "defaultStatus": "unaffected"
        }
      ]
    }
  ],
  "published": "2026-05-07T09:16:26.497",
  "references": [
    {
      "url": "https://patchstack.com/database/wordpress/plugin/bus-ticket-booking-with-seat-reservation/vulnerability/wordpress-bus-ticket-booking-with-seat-reservation-plugin-5-6-8-broken-access-control-vulnerability?_s_id=cve",
      "source": "audit@patchstack.com"
    }
  ],
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "audit@patchstack.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-862"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Missing Authorization vulnerability in Magepeople inc. Bus Ticket Booking with Seat Reservation allows Exploiting Incorrectly Configured Access Control Security Levels.\n\nThis issue affects Bus Ticket Booking with Seat Reservation: from n/a before 5.6.8."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad de Autorización Faltante en Magepeople inc. Bus Ticket Booking with Seat Reservation permite la Explotación de Niveles de Seguridad de Control de Acceso Incorrectamente Configurados.\n\nEste problema afecta a Bus Ticket Booking with Seat Reservation: desde n/a antes de 5.6.8."
    }
  ],
  "lastModified": "2026-09-30T21:10:00.190",
  "sourceIdentifier": "audit@patchstack.com"
}