Lucene search

PatchstackCVE-2023-40204

HistoryDec 20, 2023 - 7:15 p.m.

CVE-2023-40204

2023-12-2019:15:09

CWE-434

Patchstack

web.nvd.nist.gov

cve-2023-40204

unrestricted upload

dangerous type

premio folders

media library folder

file manager

CVSS3

9.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

AI Score

7.4

Confidence

High

EPSS

0.001

Percentile

19.3%

JSON

Unrestricted Upload of File with Dangerous Type vulnerability in Premio Folders – Unlimited Folders to Organize Media Library Folder, Pages, Posts, File Manager.This issue affects Folders – Unlimited Folders to Organize Media Library Folder, Pages, Posts, File Manager: from n/a through 2.9.2.

Affected configurations

Nvd

Vulners

Node

premiofoldersRange≤2.9.2wordpress

VendorProductVersionCPE
premiofolders*cpe:2.3:a:premio:folders:*:*:*:*:*:wordpress:*:*

Vendor	Product	Version	CPE
premio	folders	*	cpe:2.3:a:premio:folders::::::wordpress::*

CNA Affected

[
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "folders",
    "product": "Folders – Unlimited Folders to Organize Media Library Folder, Pages, Posts, File Manager",
    "vendor": "Premio",
    "versions": [
      {
        "changes": [
          {
            "at": "2.9.3",
            "status": "unaffected"
          }
        ],
        "lessThanOrEqual": "2.9.2",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  }
]

References

patchstack.com/database/vulnerability/folders/wordpress-folders-plugin-2-9-2-arbitrary-file-upload-vulnerability?_s_id=cve

CVSS3

9.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

AI Score

7.4

Confidence

High

EPSS

0.001

Percentile

19.3%

JSON

Related for CVE-2023-40204