CVE-2022-34154

Опубликовано: 01 авг. 2022

Источник: nvd

CVSS3: 7.2

CVSS3: 8.8

EPSS Низкий

Описание

Authenticated (author or higher user role) Arbitrary File Upload vulnerability in ideasToCode Enable SVG, WebP & ICO Upload plugin <= 1.0.1 at WordPress.

Ссылки

https://patchstack.com/database/vulnerability/enable-svg-webp-ico-upload/wordpress-enable-svg-webp-ico-upload-plugin-1-0-1-authenticated-arbitrary-file-upload-vulnerability
Third Party Advisory
https://wordpress.org/plugins/enable-svg-webp-ico-upload/#developers
Product
Third Party Advisory
https://patchstack.com/database/vulnerability/enable-svg-webp-ico-upload/wordpress-enable-svg-webp-ico-upload-plugin-1-0-1-authenticated-arbitrary-file-upload-vulnerability
Third Party Advisory
https://wordpress.org/plugins/enable-svg-webp-ico-upload/#developers
Product
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:ideastocode:enable_svg\,_webp_\&_ico_upload:*:*:*:*:*:wordpress:*:*

Версия до 1.0.1 (включая)

EPSS

Процентиль: 77%

0.00994

Низкий

7.2 High

CVSS3

8.8 High

CVSS3

Дефекты

CWE-434

Связанные уязвимости

GHSA-9r23-xjjv-gr5j

CVSS3: 8.8

github

больше 3 лет назад

Authenticated (author or higher user role) Arbitrary File Upload vulnerability in ideasToCode Enable SVG, WebP & ICO Upload plugin <= 1.0.1 at WordPress.

EPSS

Процентиль: 77%

0.00994

Низкий

7.2 High

CVSS3

8.8 High

CVSS3

Дефекты

CWE-434