Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-9rq6-59m3-gmgx

Опубликовано: 13 июн. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

The Download Manager plugin for WordPress is vulnerable to unauthorized access of data due to an improper authorization check on the 'protectMediaLibrary' function in all versions up to, and including, 3.2.89. This makes it possible for unauthenticated attackers to download password-protected files.

The Download Manager plugin for WordPress is vulnerable to unauthorized access of data due to an improper authorization check on the 'protectMediaLibrary' function in all versions up to, and including, 3.2.89. This makes it possible for unauthenticated attackers to download password-protected files.

EPSS

Процентиль: 82%
0.01745
Низкий

7.5 High

CVSS3

Дефекты

CWE-863

Связанные уязвимости

CVSS3: 7.5
nvd
больше 1 года назад

The Download Manager plugin for WordPress is vulnerable to unauthorized access of data due to an improper authorization check on the 'protectMediaLibrary' function in all versions up to, and including, 3.2.89. This makes it possible for unauthenticated attackers to download password-protected files.

EPSS

Процентиль: 82%
0.01745
Низкий

7.5 High

CVSS3

Дефекты

CWE-863