CVE-2023-33318: WooCommerce AutomateWoo, качване на файлове

Описание

Оригинално описание

Unrestricted Upload of File with Dangerous Type vulnerability in WooCommerce AutomateWoo.This issue affects AutomateWoo: from n/a through 4.9.40.

Засегнати продукти

• WooCommerce AutomateWoo: n/a до 4.9.40

Вид слабост

• CWE-434 Неограничено качване на файл от опасен тип

История

Други уязвимости в WooCommerce AutomateWoo

• 7.6CVE-2023-32743
• 8.5CVE-2023-33330
• 5.4CVE-2023-32745
• 5.4CVE-2023-36513

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2023-33318
• https://nvd.nist.gov/vuln/detail/CVE-2023-33318
• https://patchstack.com/database/vulnerability/woocommerce-follow-up-emails/wordpress-woocommerce-follow-up-emails-plugin-4-9-40-arbitrary-file-upload-vulnerability?_s_id=cve