PT-2019-7438
CVE-2015-9479
·
تاريخ النشر
2019-10-10
·
تاريخ التحديث
2019-10-17
الوصف من
CVSS 2.0
7.5
عاليةالمقاييسAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
ACF-Frontend-Display plugin through 2015-07-03 for WordPress
Description
The issue allows for arbitrary file upload via an action=upload request to "js/blueimp-jQuery-File-Upload-d45deb1/server/php/index.php".
Recommendations
For versions of the ACF-Frontend-Display plugin through 2015-07-03, consider restricting access to the "js/blueimp-jQuery-File-Upload-d45deb1/server/php/index.php" endpoint to minimize the risk of exploitation. As a temporary workaround, avoid using the
action=upload request in the affected endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾