Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-c59h-89fr-559v

Опубликовано: 19 дек. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 5.3

Описание

The Download Manager plugin for WordPress is vulnerable to unauthorized download of password-protected content due to improper password validation on the checkFilePassword function in all versions up to, and including, 3.3.03. This makes it possible for unauthenticated attackers to download password-protected files.

The Download Manager plugin for WordPress is vulnerable to unauthorized download of password-protected content due to improper password validation on the checkFilePassword function in all versions up to, and including, 3.3.03. This makes it possible for unauthenticated attackers to download password-protected files.

EPSS

Процентиль: 52%
0.00288
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-285

Связанные уязвимости

CVSS3: 5.3
nvd
около 1 года назад

The Download Manager plugin for WordPress is vulnerable to unauthorized download of password-protected content due to improper password validation on the checkFilePassword function in all versions up to, and including, 3.3.03. This makes it possible for unauthenticated attackers to download password-protected files.

EPSS

Процентиль: 52%
0.00288
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-285