PT-2024-26345
CVE-2024-35162
·
تاريخ النشر
2024-05-22
·
تاريخ التحديث
2024-08-12
الوصف من
CVSS 3.1
6.5
متوسطةالمقاييسAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Download Plugins and Themes from Dashboard versions prior to 1.8.6
Description
A path traversal issue exists, allowing a remote authenticated attacker with
switch themes privilege to obtain arbitrary files on the server if exploited.Recommendations
For versions prior to 1.8.6, update to version 1.8.6 or later to resolve the issue. As a temporary workaround, consider restricting the
switch themes privilege to minimize the risk of exploitation. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾