Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2017-1002016

Опубликовано: 14 сент. 2017
Источник: nvd
CVSS3: 9.8
CVSS2: 7.5
EPSS Средний

Описание

Vulnerability in wordpress plugin flickr-picture-backup v0.7, The code in flickr-picture-download.php doesn't check to see if the user is authenticated or that they have permission to upload files.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:flickr_picture_backup_project:flickr_picture_backup:0.7:*:*:*:*:wordpress:*:*

EPSS

Процентиль: 94%
0.1458
Средний

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-434

Связанные уязвимости

CVSS3: 9.8
github
больше 3 лет назад

Vulnerability in wordpress plugin flickr-picture-backup v0.7, The code in flickr-picture-download.php doesn't check to see if the user is authenticated or that they have permission to upload files.

EPSS

Процентиль: 94%
0.1458
Средний

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-434