Описание
Directory traversal in the Media File Organizer (aka media-file-organizer) plugin 1.0.1 for WordPress lets an attacker get access to files that are stored outside the web root folder via the items[] parameter in a move operation.
Ссылки
- Third Party Advisory
- Vendor Advisory
- Third Party Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:media_file_organizer_project:media_file_organizer:1.0.1:*:*:*:*:wordpress:*:*
EPSS
Процентиль: 77%
0.01093
Низкий
8.6 High
CVSS3
5 Medium
CVSS2
Дефекты
CWE-22
Связанные уязвимости
github
больше 3 лет назад
Directory traversal in the Media File Organizer (aka media-file-organizer) plugin 1.0.1 for WordPress lets an attacker get access to files that are stored outside the web root folder via the items[] parameter in a move operation.
EPSS
Процентиль: 77%
0.01093
Низкий
8.6 High
CVSS3
5 Medium
CVSS2
Дефекты
CWE-22