CVE-2017-1002016 in flickr-picture-backup

Riassunto

di MITRE

Vulnerability in wordpress plugin flickr-picture-backup v0.7, The code in flickr-picture-download.php doesn't check to see if the user is authenticated or that they have permission to upload files.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Prenotare: 14/09/2017
• Divulgazione: 14/09/2017
• Moderazione: accettato
• Voce: VDB-106699
• CPE: pronto
• CWE: CWE-434 (confermato)
• CVSS: 9.8 (NVD)
• EPSS: 0.02558
• KEV: no
• Attività: molto basso
• Settore: Chemical, Transportation, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2017-1002016
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2017-1002016
• CVE Details: https://www.cvedetails.com/cve/CVE-2017-1002016/