CVSS 3.1
Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)
Атакува се
Време до експлоатация
Атакува се по мрежата, при специфични условия, с обикновен потребителски вход и без действие от потребителя.
- Експлоатация: няма данни за експлоатация
- Атаката не може да се автоматизира
Описание
Оригинално описание
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Automattic WordPress allows Relative Path Traversal.This issue affects WordPress: from 6.5 through 6.5.4, from 6.4 through 6.4.4, from 6.3 through 6.3.4, from 6.2 through 6.2.5, from 6.1 through 6.1.6, from 6.0 through 6.0.8, from 5.9 through 5.9.9, from 5.8 through 5.8.9, from 5.7 through 5.7.11, from 5.6 through 5.6.13, from 5.5 through 5.5.14, from 5.4 through 5.4.15, from 5.3 through 5.3.17, from 5.2 through 5.2.20, from 5.1 through 5.1.18, from 5.0 through 5.0.21, from 4.9 through 4.9.25, from 4.8 through 4.8.24, from 4.7 through 4.7.28, from 4.6 through 4.6.28, from 4.5 through 4.5.31, from 4.4 through 4.4.32, from 4.3 through 4.3.33, from 4.2 through 4.2.37, from 4.1 through 4.1.40.
Засегнати продукти
- Automattic WordPress: 6.5 до 6.5.4; 6.4 до 6.4.4; 6.3 до 6.3.4; 6.2 до 6.2.5; 6.1 до 6.1.6; 6.0 до 6.0.8; 5.9 до 5.9.9; 5.8 до 5.8.9; 5.7 до 5.7.11; 5.6 до 5.6.13; 5.5 до 5.5.14; 5.4 до 5.4.15; 5.3 до 5.3.17; 5.2 до 5.2.20; 5.1 до 5.1.18; 5.0 до 5.0.21; 4.9 до 4.9.25; 4.8 до 4.8.24; 4.7 до 4.7.28; 4.6 до 4.6.28; 4.5 до 4.5.31; 4.4 до 4.4.32; 4.3 до 4.3.33; 4.2 до 4.2.37; 4.1 до 4.1.40
Вид слабост
История
- 25 юни 2024 Публикувано