7.5
CVE-2022-2544
- EPSS 52.1%
- Published 22.08.2022 15:15:15
- Last modified 21.11.2024 07:01:13
- Source contact@wpscan.com
- Teams watchlist Login
- Open Login
The Ninja Job Board WordPress plugin before 1.3.3 does not protect the directory where it stores uploaded resumes, making it vulnerable to unauthenticated Directory Listing which allows the download of uploaded resumes.
Data is provided by the National Vulnerability Database (NVD)
Wpmanageninja ≫ Ninja Job Board SwPlatformwordpress Version < 1.3.3
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 52.1% | 0.978 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 7.5 | 3.9 | 3.6 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
|
CWE-425 Direct Request ('Forced Browsing')
The web application does not adequately enforce appropriate authorization on all restricted URLs, scripts, or files.