6.5
CVE-2022-1551
- EPSS 0.78%
- Veröffentlicht 25.07.2022 13:15:08
- Zuletzt bearbeitet 21.11.2024 06:40:57
- Quelle contact@wpscan.com
- CVE-Watchlists
- Unerledigt
LoginSP Project & Document Manager < 4.58 - Sensitive File Disclosure
SP Project & Document Manager <= 4.57 - Sensitive File Disclosure
The SP Project & Document Manager WordPress plugin before 4.58 uses an easily guessable path to store user files, bad actors could use that to access other users' sensitive files.
Mögliche Gegenmaßnahme
SP Project & Document Manager: Update to version 4.58, or a newer patched version
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Smartypantsplugins ≫ Sp Project & Document Manager SwPlatformwordpress Version < 4.58
Weitere Schwachstelleninformationen
SystemWordPress Plugin
≫
Produkt
SP Project & Document Manager
Version
*-4.57
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.78% | 0.511 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 6.5 | 2.8 | 3.6 |
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
|
CWE-425 Direct Request ('Forced Browsing')
The web application does not adequately enforce appropriate authorization on all restricted URLs, scripts, or files.
https://wpscan.com/vulnerability/51b4752a-7922-444d-a022-f1c7159b5d84
https://www.wordfence.com/threat-intel/vulnerabilities/id/8254f4ab-b7a4-4823-8bf9-0673cea1248e