PT-2021-10944
CVE-2020-23765
·
Published
2021-05-21
·
Updated
2021-05-27
Description by
CVSS 3.1
7.2
HighMetricsAV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions:
Bludit version 3.12.0
Description:
A file upload issue was found in the file path /bl-plugins/backup/plugin.php. If an attacker gains Administrator rights, they can use unsafe plugins to upload a backup file and control the server.
Recommendations:
For Bludit version 3.12.0, consider restricting access to the /bl-plugins/backup/plugin.php file until a patch is available. As a temporary workaround, limit the use of unsafe plugins to minimize the risk of exploitation.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾