Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-26r5-gf8m-4xfr

Опубликовано: 04 сент. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 4.9

Описание

The Advanced File Manager WordPress plugin before 5.1.1 does not adequately authorize its usage on multisite installations, allowing site admin users to list and read arbitrary files and folders on the server.

The Advanced File Manager WordPress plugin before 5.1.1 does not adequately authorize its usage on multisite installations, allowing site admin users to list and read arbitrary files and folders on the server.

EPSS

Процентиль: 37%
0.00157
Низкий

4.9 Medium

CVSS3

Дефекты

CWE-284
CWE-863

Связанные уязвимости

CVSS3: 4.9
nvd
больше 2 лет назад

The Advanced File Manager WordPress plugin before 5.1.1 does not adequately authorize its usage on multisite installations, allowing site admin users to list and read arbitrary files and folders on the server.

EPSS

Процентиль: 37%
0.00157
Низкий

4.9 Medium

CVSS3

Дефекты

CWE-284
CWE-863