Description

Insufficient sanitizing in backup resulted in an arbitrary file read risk. The capability to access this feature is only available to teachers, managers and admins by default.

Remediation

References

CVE-2023-28330

Related Vulnerabilities

Jenkins Improper Access Control Vulnerability (CVE-2015-5325)

WordPress Plugin Two Factor Authentication Cross-Site Request Forgery (1.3.12)

MediaWiki Insufficiently Protected Credentials Vulnerability (CVE-2020-29005)

WordPress Plugin WordPress Popups for Marketing and Email Newsletters, Lead Generation and Conversions by OptinMonster Security Bypass (2.6.4)

MySQL CVE-2014-2438 Vulnerability (CVE-2014-2438)

Severity

Medium

Classification

CVE-2023-28330 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Tags

Missing Update Known Vulnerabilities