PT-2019-7072
CVE-2014-10396
·
تاريخ النشر
2019-09-20
·
تاريخ التحديث
2019-09-27
الوصف من
CVSS 2.0
5.0
متوسطةالمقاييسAV:N/AC:L/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Epic theme for WordPress versions through 2014-09-07
Description
The issue allows arbitrary file downloads via the
file parameter to the "includes/download.php" endpoint. This could potentially lead to unauthorized access to sensitive files.Recommendations
For Epic theme for WordPress versions through 2014-09-07, consider restricting access to the "includes/download.php" endpoint until a fix is available. As a temporary workaround, avoid using the
file parameter in the affected endpoint to minimize the risk of exploitation. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾