Описание
The kboard WordPress plugin before 6.7 does not verify ownership or context before deleting board media, allowing unauthenticated attackers to permanently delete its uploaded media files and their database records by iterating identifiers.
EPSS
Процентиль: 15%
0.00239
Низкий
5.3 Medium
CVSS3
Дефекты
CWE-639
Связанные уязвимости
CVSS3: 5.3
github
7 дней назад
The kboard WordPress plugin before 6.7 does not verify ownership or context before deleting board media, allowing unauthenticated attackers to permanently delete its uploaded media files and their database records by iterating identifiers.
EPSS
Процентиль: 15%
0.00239
Низкий
5.3 Medium
CVSS3
Дефекты
CWE-639