CVE-2022-1657 JupiterX Theme <= 2.0.6 and Jupiter Theme <= 6.10.1 - Authenticated Path Traversal and Local File Inclusion

🗓️ 13 Jun 2022 13:06:48Reported by WordfenceType

Vulnerability in Jupiter and JupiterX themes allowing authenticated users to perform Path Traversal and Local File Inclusio

Reporter	Title	Published	Views	Family All 14
Circl	CVE-2022-1657	19 May 202215:47	–	circl
CNNVD	JupiterX Theme 路径遍历漏洞	18 May 202200:00	–	cnnvd
CNVD	WordPress JupiterX Theme和Jupiter Theme路径遍历漏洞	20 May 202200:00	–	cnvd
CVE	CVE-2022-1657	13 Jun 202213:06	–	cve
EUVD	EUVD-2022-24943	3 Oct 202520:07	–	euvd
NVD	CVE-2022-1657	13 Jun 202214:15	–	nvd
Patchstack	WordPress Jupiter premium theme <= 6.10.1 - Authenticated Path Traversal and Local File Inclusion (LFI) vulnerability	18 May 202200:00	–	patchstack
Patchstack	WordPress JupiterX premium theme <= 2.0.6 - Authenticated Path Traversal and Local File Inclusion (LFI) vulnerability	18 May 202200:00	–	patchstack
Prion	Path traversal	13 Jun 202214:15	–	prion
RedhatCVE	CVE-2022-1657	5 Feb 202523:01	–	redhatcve

[
  {
    "product": "Jupiter",
    "vendor": "ArtBees",
    "versions": [
      {
        "lessThanOrEqual": "6.10.1",
        "status": "affected",
        "version": "6.10.1",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Jupiter X",
    "vendor": "ArtBees",
    "versions": [
      {
        "lessThanOrEqual": "2.0.6",
        "status": "affected",
        "version": "2.0.6",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
wordfence	www.wordfence.com/blog/2022/05/critical-privilege-escalation-vulnerability-in-jupiter-and-jupiterx-premium-themes/

13 Jun 2022 13:06Current

8.7High risk

Vulners AI Score8.7

CVSS 3.18.8

EPSS0.01586

CWE-22