PT-2021-11843
CVE-2020-35749
·
تاريخ النشر
2021-01-15
·
تاريخ التحديث
2022-02-22
الوصف من
CVSS 3.1
7.7
عاليةالمقاييسAV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions:
Simple Board Job plugin versions 2.9.3 and earlier
Description:
A directory traversal issue allows remote attackers to read arbitrary files via the
sjb file parameter to "wp-admin/post.php".Recommendations:
For Simple Board Job plugin versions 2.9.3 and earlier, consider disabling the
class-simple job board resume download handler.php file until a patch is available.
Restrict access to the "wp-admin/post.php" endpoint to minimize the risk of exploitation.
Avoid using the sjb file parameter in the affected endpoint until the issue is resolved. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾