exploitDog

GHSA-5267-2g9r-5cqx

Опубликовано: 22 июл. 2022

Источник: github

Github: Не прошло ревью

CVSS3: 4.9

Описание

Authenticated (custom plugin role) Arbitrary File Read via Export function vulnerability in GiveWP's GiveWP plugin <= 2.20.2 at WordPress.

Authenticated (custom plugin role) Arbitrary File Read via Export function vulnerability in GiveWP's GiveWP plugin <= 2.20.2 at WordPress.

Ссылки

EPSS

Процентиль: 63%

0.00439

Низкий

4.9 Medium

CVSS3

CVE ID

Дефекты

CWE-22

CWE-668

Связанные уязвимости

CVE-2022-31475

CVSS3: 5.5

nvd

больше 3 лет назад

Authenticated (custom plugin role) Arbitrary File Read via Export function vulnerability in GiveWP's GiveWP plugin <= 2.20.2 at WordPress.

EPSS

Процентиль: 63%

0.00439

Низкий

4.9 Medium

CVSS3

CVE ID

Дефекты

CWE-22

CWE-668