CVE-2017-2245

Опубликовано: 07 июл. 2017

Источник: nvd

CVSS3: 5

CVSS2: 4

EPSS Низкий

Описание

Directory traversal vulnerability in Shortcodes Ultimate prior to version 4.10.0 allows remote attackers to read arbitrary files via unspecified vectors.

Ссылки

http://www.securityfocus.com/bid/99495
Third Party Advisory
VDB Entry
https://jvn.jp/en/jp/JVN63249051/index.html
Third Party Advisory
VDB Entry
https://plugins.trac.wordpress.org/changeset/1684377/#file217
Third Party Advisory
https://wordpress.org/plugins/shortcodes-ultimate/#developers
Release Notes
Vendor Advisory
http://www.securityfocus.com/bid/99495
Third Party Advisory
VDB Entry
https://jvn.jp/en/jp/JVN63249051/index.html
Third Party Advisory
VDB Entry
https://plugins.trac.wordpress.org/changeset/1684377/#file217
Third Party Advisory
https://wordpress.org/plugins/shortcodes-ultimate/#developers
Release Notes
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:getshortcodes:shortcodes_ultimate:*:*:*:*:*:wordpress:*:*

Версия до 4.9.9 (включая)

EPSS

Процентиль: 69%

0.0061

Низкий

5 Medium

CVSS3

4 Medium

CVSS2

Дефекты

CWE-22

Связанные уязвимости

GHSA-6jjc-rhxj-wqfc