Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-vm6r-qwjc-7jvf

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

The Photo Gallery by 10Web – Mobile-Friendly Image Gallery WordPress plugin before 1.5.75 did not ensure that uploaded files are kept inside its uploads folder, allowing high privilege users to put images/SVG anywhere in the filesystem via a path traversal vector

The Photo Gallery by 10Web – Mobile-Friendly Image Gallery WordPress plugin before 1.5.75 did not ensure that uploaded files are kept inside its uploads folder, allowing high privilege users to put images/SVG anywhere in the filesystem via a path traversal vector

EPSS

Процентиль: 57%
0.0035
Низкий

Дефекты

CWE-22

Связанные уязвимости

CVSS3: 4.9
nvd
больше 4 лет назад

The Photo Gallery by 10Web – Mobile-Friendly Image Gallery WordPress plugin before 1.5.75 did not ensure that uploaded files are kept inside its uploads folder, allowing high privilege users to put images/SVG anywhere in the filesystem via a path traversal vector

EPSS

Процентиль: 57%
0.0035
Низкий

Дефекты

CWE-22