CVE-2017-17058
46Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendcvss 7.5epss 24%
from disclosure to weapon0 days
Published on NVDNov 29
1st PoCNov 28
exploitation probability
24%top 2% of all CVEs
observed exploitation
nono source reports it
4 public exploit(s)
The WooCommerce plugin through 3.x for WordPress has a Directory Traversal Vulnerability via a /wp-content/plugins/woocommerce/templates/emails/plain/ URI, which accesses a parent directory. NOTE: a software maintainer indicates that Directory Traversal is not possible because all of the template files have "if (!defined('ABSPATH')) {exit;}" code
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected products
n/a · n/apublic PoCs found — 4
exploitdbwww.exploit-db.com/exploits/43196unverifiedgithubgithub.com/fu2x2000/CVE-2017-17058-woo_exploit★ 0cve_referencewww.exploit-db.com/exploits/43196/unverifiedcve_referencewww.exploit-db.com/ghdb/4613/unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.