Описание
The Correos Oficial WordPress plugin through 1.2.0.2 does not have an authorization check user input validation when generating a file path, allowing unauthenticated attackers to download arbitrary files from the server.
Ссылки
- ExploitThird Party Advisory
- ExploitThird Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 1.2.0.2 (включая)
cpe:2.3:a:correos:correos_oficial:*:*:*:*:*:wordpress:*:*
EPSS
Процентиль: 52%
0.0029
Низкий
7.5 High
CVSS3
Дефекты
Связанные уязвимости
CVSS3: 7.5
github
почти 3 года назад
The Correos Oficial WordPress plugin through 1.2.0.2 does not have an authorization check user input validation when generating a file path, allowing unauthenticated attackers to download arbitrary files from the server.
EPSS
Процентиль: 52%
0.0029
Низкий
7.5 High
CVSS3