CVE-2023-5907

Katalog CVE

CVSS 6.5 · Medium EPSS 0,85%

Kerentanan Files or Directories Accessible to External Parties pada bitapps file manager. Skor CVSS 3.1 6.5 (Medium) menurut NVD.

Deskripsi (NVD)

The File Manager WordPress plugin before 6.3 does not restrict the file managers root directory, allowing an administrator to set a root outside of the WordPress root directory, giving access to system files and directories even in a multisite setup, where site administrators should not be allowed to modify the sites files.

Rincian

Terbit di NVD

11 Desember 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

6.5 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-552: Files or Directories Accessible to External Parties

EPSS (30 hari)

0,85% peluang dieksploitasi; lebih tinggi dari 57,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://wpscan.com/vulnerability/f250226f-4a05-4d75-93c4-5444a4ce919e exploit · advisory pihak ketiga