Описание
Bludit versions before 3.13.1 contain an authenticated file download vulnerability in the Backup Plugin that allows logged-in users to access arbitrary files. Attackers can exploit the plugin's download functionality by manipulating file path parameters to read sensitive system files through directory traversal.
Уязвимые конфигурации
Конфигурация 1Версия до 3.13.1 (исключая)
cpe:2.3:a:bludit:bludit:*:*:*:*:*:*:*:*
EPSS
Процентиль: 54%
0.00317
Низкий
6.5 Medium
CVSS3
Дефекты
CWE-22
Связанные уязвимости
CVSS3: 6.5
github
около 2 месяцев назад
Bludit versions before 3.13.1 contain an authenticated file download vulnerability in the Backup Plugin that allows logged-in users to access arbitrary files. Attackers can exploit the plugin's download functionality by manipulating file path parameters to read sensitive system files through directory traversal.
EPSS
Процентиль: 54%
0.00317
Низкий
6.5 Medium
CVSS3
Дефекты
CWE-22