CVE-2024-31287

Опубликовано: 10 апр. 2024

Источник: nvd

CVSS3: 6.5

EPSS Низкий

Описание

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Max Foundry Media Library Folders.This issue affects Media Library Folders: from n/a through 8.1.8.

Ссылки

https://patchstack.com/database/vulnerability/media-library-plus/wordpress-media-library-folders-plugin-8-1-8-directory-traversal-vulnerability?_s_id=cve
Third Party Advisory
https://patchstack.com/database/vulnerability/media-library-plus/wordpress-media-library-folders-plugin-8-1-8-directory-traversal-vulnerability?_s_id=cve
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:maxfoundry:media_library_folders:*:*:*:*:*:wordpress:*:*

Версия до 8.1.9 (исключая)

EPSS

Процентиль: 72%

0.00731

Низкий

6.5 Medium

CVSS3

Дефекты

CWE-22

Связанные уязвимости

GHSA-p52c-jr7p-8c89