CVE-2022-2926
Download Manager < 3.2.55 - Admin+ Arbitrary File/Folder Access via Path Traversal
Vexday Risk Score
13Bajo
Decisión SSVC (CISA)
Track
Sin señal de explotación → monitorear
CVSS 4.9EPSS 1.3%KEV nãoPoC —Nuclei —Metasploit —Patch —
Ciclo de vida
26 sep 2022Publicada en NVD
Recomendación: Monitorear — sin señal de explotación por ahora.
The Download Manager WordPress plugin before 3.2.55 does not validate one of its settings, which could allow high privilege users such as admin to list and read arbitrary files and folders outside of the blog directory
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Productos afectados
Unknown · Download Manager¿Quieres saber si tu infraestructura está expuesta a esto?
Hablar con TrueHacking →