Описание
The OMGF | Host Google Fonts Locally WordPress plugin before 4.5.12 does not validate the cache directory setting, allowing high privilege users to use a path traversal vector and delete arbitrary folders when uninstalling the plugin
Ссылки
- ExploitThird Party Advisory
- ExploitThird Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 4.5.12 (исключая)
cpe:2.3:a:ffw:optimize_my_google_fonts:*:*:*:*:*:wordpress:*:*
EPSS
Процентиль: 62%
0.00425
Низкий
4.9 Medium
CVSS3
4 Medium
CVSS2
Дефекты
CWE-22
CWE-22
Связанные уязвимости
github
около 4 лет назад
The OMGF | Host Google Fonts Locally WordPress plugin before 4.5.12 does not validate the cache directory setting, allowing high privilege users to use a path traversal vector and delete arbitrary folders when uninstalling the plugin
EPSS
Процентиль: 62%
0.00425
Низкий
4.9 Medium
CVSS3
4 Medium
CVSS2
Дефекты
CWE-22
CWE-22