Description

qdPM 9.2 allows Directory Traversal to list files and directories by navigating to the /uploads URI.

Remediation

References

CVE-2023-45855

Related Vulnerabilities

WordPress Plugin WP Helper Premium Cross-Site Scripting (4.2)

WordPress Plugin Smart Slider 2 Multiple Cross-Site Scripting Vulnerabilities (2.3.11)

OpenSSL Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2016-2842)

Nexus Repository Manager CVE-2019-15893 Vulnerability (CVE-2019-15893)

WordPress Plugin Health Check & Troubleshooting Arbitrary File Disclosure (1.2.3)

Severity

High

Classification

CVE-2023-45855 CWE-22 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Tags

Missing Update Known Vulnerabilities