PT-2018-16870
CVE-2018-5289
·
Publicado
2018-01-08
·
Atualizado
2018-01-19
Descrição por
CVSS 3.1
7.5
AltaMétricasAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
GD Rating System plugin version 2.3
Description
The issue concerns a Directory Traversal problem in the
wp-admin/admin.php panel, specifically affecting the gd-rating-system-information page. This is related to a parameter in the plugin's administration panel.Recommendations
For GD Rating System plugin version 2.3, consider restricting access to the vulnerable
gd-rating-system-information page in the wp-admin/admin.php panel until a patch is available. Avoid using the affected parameter in the administration panel to minimize the risk of exploitation.Explorabilidade
Exploit
Correção
Impactos
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾