Lucene search

[email protected]CVE-2012-4915

HistoryMay 29, 2014 - 2:19 p.m.

CVE-2012-4915

2014-05-2914:19:06

CWE-22

[email protected]

web.nvd.nist.gov

security

vulnerability

cve-2012-4915

wordpress

google doc embedder

directory traversal

nvd

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

6.8 Medium

AI Score

Confidence

Low

0.911 High

EPSS

Percentile

98.9%

JSON

Directory traversal vulnerability in the Google Doc Embedder plugin before 2.5.4 for WordPress allows remote attackers to read arbitrary files via a … (dot dot) in the file parameter to libs/pdf.php.

Affected configurations

NVD

Node

davistribegoogle_doc_embedderRange≤2.5.3

davistribegoogle_doc_embedderMatch2.0

davistribegoogle_doc_embedderMatch2.1

davistribegoogle_doc_embedderMatch2.2

davistribegoogle_doc_embedderMatch2.2.1

davistribegoogle_doc_embedderMatch2.2.2

davistribegoogle_doc_embedderMatch2.2.3

davistribegoogle_doc_embedderMatch2.3

davistribegoogle_doc_embedderMatch2.4

davistribegoogle_doc_embedderMatch2.4.1

davistribegoogle_doc_embedderMatch2.4.2

davistribegoogle_doc_embedderMatch2.4.3

davistribegoogle_doc_embedderMatch2.4.4

davistribegoogle_doc_embedderMatch2.4.5

davistribegoogle_doc_embedderMatch2.4.6

davistribegoogle_doc_embedderMatch2.5

davistribegoogle_doc_embedderMatch2.5.1

davistribegoogle_doc_embedderMatch2.5.2

AND

wordpresswordpressMatch-

CPENameOperatorVersion
davistribe:google_doc_embedderdavistribe google doc embedderle2.5.3
davistribe:google_doc_embedderdavistribe google doc embeddereq2.0
davistribe:google_doc_embedderdavistribe google doc embeddereq2.1
davistribe:google_doc_embedderdavistribe google doc embeddereq2.2
davistribe:google_doc_embedderdavistribe google doc embeddereq2.2.1
davistribe:google_doc_embedderdavistribe google doc embeddereq2.2.2
davistribe:google_doc_embedderdavistribe google doc embeddereq2.2.3
davistribe:google_doc_embedderdavistribe google doc embeddereq2.3
davistribe:google_doc_embedderdavistribe google doc embeddereq2.4
davistribe:google_doc_embedderdavistribe google doc embeddereq2.4.1

CPE	Name	Operator	Version
davistribe:google_doc_embedder	davistribe google doc embedder	le	2.5.3
davistribe:google_doc_embedder	davistribe google doc embedder	eq	2.0
davistribe:google_doc_embedder	davistribe google doc embedder	eq	2.1
davistribe:google_doc_embedder	davistribe google doc embedder	eq	2.2
davistribe:google_doc_embedder	davistribe google doc embedder	eq	2.2.1
davistribe:google_doc_embedder	davistribe google doc embedder	eq	2.2.2
davistribe:google_doc_embedder	davistribe google doc embedder	eq	2.2.3
davistribe:google_doc_embedder	davistribe google doc embedder	eq	2.3
davistribe:google_doc_embedder	davistribe google doc embedder	eq	2.4
davistribe:google_doc_embedder	davistribe google doc embedder	eq	2.4.1