CVE-2019-19985

Опубликовано: 26 дек. 2019

Источник: nvd

CVSS3: 5.8

CVSS3: 5.3

CVSS2: 5

EPSS Высокий

Описание

The WordPress plugin, Email Subscribers & Newsletters, before 4.2.3 had a flaw that allowed unauthenticated file download with user information disclosure.

Ссылки

http://packetstormsecurity.com/files/158563/WordPress-Email-Subscribers-And-Newsletters-4.2.2-File-Disclosure.html
Third Party Advisory
VDB Entry
https://wpvulndb.com/vulnerabilities/9946
Third Party Advisory
https://www.wordfence.com/blog/2019/11/multiple-vulnerabilities-patched-in-email-subscribers-newsletters-plugin/
Exploit
Third Party Advisory
http://packetstormsecurity.com/files/158563/WordPress-Email-Subscribers-And-Newsletters-4.2.2-File-Disclosure.html
Third Party Advisory
VDB Entry
https://wpvulndb.com/vulnerabilities/9946
Third Party Advisory
https://www.wordfence.com/blog/2019/11/multiple-vulnerabilities-patched-in-email-subscribers-newsletters-plugin/
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:icegram:email_subscribers_\&_newsletters:*:*:*:*:*:wordpress:*:*

Версия до 4.2.3 (исключая)

EPSS

Процентиль: 99%

0.86715

Высокий

5.8 Medium

CVSS3

5.3 Medium

CVSS3

5 Medium

CVSS2

Дефекты

CWE-862

Связанные уязвимости

GHSA-862m-v43m-wwr6

CVSS3: 5.3

github

больше 3 лет назад

The WordPress plugin, Email Subscribers & Newsletters, before 4.2.3 had a flaw that allowed unauthenticated file download with user information disclosure.

EPSS

Процентиль: 99%

0.86715

Высокий

5.8 Medium

CVSS3

5.3 Medium

CVSS3

5 Medium

CVSS2

Дефекты

CWE-862