Vulnerability record/PUBLISHED/Published Jun 11, 2024 09:21:00 UTC
CVE-2024-35692
Missing Authorization vulnerability in Termly Cookie Consent.This issue affects Cookie Consent: from n/a through 3.2.
Base score5.3/ 10
SeverityMediumCVSS 3.1
Exploitability / impact
CVSS metric breakdown
Base severityMedium
Attack vectorNetworkAV
Attack complexityLowAC
Privileges requiredNonePR
User interactionNoneUI
ScopeUnchangedS
Confidentiality impactNoneC
Integrity impactLowI
Availability impactNoneA
CVSS vector string
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:NCVSS communicates standardized severity and impact characteristics. It does not establish whether a system is exploitable in your specific environment.
Record context
CVE Numbering AuthorityPatchstack
Last updatedApr 28, 2026 16:09:53 UTC
PublishedJun 11, 2024 09:21:00 UTC
ReservedMay 17, 2024 10:08:56 UTC
Credits
- Mika (Patchstack Alliance)