CVE-2024-0697 in Backuply Pluginالمعلومات

الملخص

بحسب MITRE • 27/01/2024

The Backuply – Backup, Restore, Migrate and Clone plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.2.3 via the node_id parameter in the backuply_get_jstree function. This makes it possible for attackers with administrator privileges or higher to read the contents of arbitrary files on the server, which can contain sensitive information.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

مسؤول

Wordfence

حجز

18/01/2024

إفشاء

27/01/2024

الاعتدال

تمت الموافقة

إدخال

VDB-252207

EPSS

0.00764

KEV

لا

النشاطات

منخفض جدًا

القطاع

Hostingprovider

المصادر

Want to stay up to date on a daily basis?

Enable the mail alert feature now!