Lucene search

K
ubuntucveUbuntu.comUB:CVE-2013-2203
HistoryJul 08, 2013 - 12:00 a.m.

CVE-2013-2203

2013-07-0800:00:00
ubuntu.com
ubuntu.com
14

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

0.003 Low

EPSS

Percentile

71.2%

WordPress before 3.5.2, when the uploads directory forbids write access,
allows remote attackers to obtain sensitive information via an invalid
upload request, which reveals the absolute path in an XMLHttpRequest error
message.

Bugs

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

0.003 Low

EPSS

Percentile

71.2%