PT-2021-10944
CVE-2020-23765
·
تاريخ النشر
2021-05-21
·
تاريخ التحديث
2021-05-27
الوصف من
CVSS 3.1
7.2
عاليةالمقاييسAV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions:
Bludit version 3.12.0
Description:
A file upload issue was found in the file path /bl-plugins/backup/plugin.php. If an attacker gains Administrator rights, they can use unsafe plugins to upload a backup file and control the server.
Recommendations:
For Bludit version 3.12.0, consider restricting access to the /bl-plugins/backup/plugin.php file until a patch is available. As a temporary workaround, limit the use of unsafe plugins to minimize the risk of exploitation.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾