Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-m3g2-fxc2-5839

Опубликовано: 17 окт. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 4.3

Описание

The Drag and Drop Multiple File Upload WordPress plugin before 1.3.6.5 does not properly check for the upload size limit set in forms, taking the value from user input sent when submitting the form. As a result, attackers could control the file length limit and bypass the limit set by admins in the contact form.

The Drag and Drop Multiple File Upload WordPress plugin before 1.3.6.5 does not properly check for the upload size limit set in forms, taking the value from user input sent when submitting the form. As a result, attackers could control the file length limit and bypass the limit set by admins in the contact form.

EPSS

Процентиль: 35%
0.0014
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-639

Связанные уязвимости

CVSS3: 4.3
nvd
больше 3 лет назад

The Drag and Drop Multiple File Upload WordPress plugin before 1.3.6.5 does not properly check for the upload size limit set in forms, taking the value from user input sent when submitting the form. As a result, attackers could control the file length limit and bypass the limit set by admins in the contact form.

EPSS

Процентиль: 35%
0.0014
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-639