← voltar
CVE-2022-2544CWE-425

Ninja Job Board < 1.3.3 - Resume Disclosure via Directory Listing

18Vexday Risk Score

Corrija em breve. Ela tem exploit funcional público.

ssvc Attendepss 3.3%
probabilidade de exploração
3.3%top 13% das CVEs
exploração observada
nãonenhuma fonte reporta
The Ninja Job Board WordPress plugin before 1.3.3 does not protect the directory where it stores uploaded resumes, making it vulnerable to unauthenticated Directory Listing which allows the download of uploaded resumes.