PT-2023-31839 · WordPress · Ioss Wp Mlm Software Plugin

·

CVE-2023-51475

·

Publicado

2023-12-29

·

Atualizado

2024-01-08

CVSS v3.1

10

Crítica

VetorAV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions WP MLM SOFTWARE PLUGIN versions n/a through 4.0
Description The issue is related to an Unrestricted Upload of File with Dangerous Type vulnerability in the IOSS WP MLM SOFTWARE PLUGIN. This allows for the upload of files with potentially dangerous types, which could lead to security issues.
Recommendations For versions n/a through 4.0, update to a version later than 4.0 to resolve the issue. As a temporary workaround, consider restricting file uploads to only necessary and safe file types until a patch is available. Restrict access to the file upload functionality to minimize the risk of exploitation.

Correção

Unrestricted File Upload

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

CVE-2023-51475

Produtos afetados

Ioss Wp Mlm Software Plugin