Missing Authorization Vulnerability Affects Dashboard To-Do List

CVE-2024-35723

What is CVE-2024-35723?

A vulnerability exists in the Dashboard To-Do List plugin developed by Andrew Rapps, which allows for missing authorization. This may enable unauthorized users to gain access to certain functionalities or data within the application. The flaw affects all versions leading up to and including 1.2.0, potentially exposing sensitive information. It is critical for users of the Dashboard To-Do List to apply the necessary security measures and updates to mitigate the risks associated with this vulnerability.

References