CVE-2022-3124 Frontend File Manager < 21.3 - Unauthenticated File Renaming

2022-10-0313:45:25

CWE-862

WPScan

www.cve.org

cve-2022-3124

frontend file manager

unauthenticated file renaming

wordpress

validation

arbitrary files

EPSS

0.001

Percentile

41.1%

JSON

The Frontend File Manager Plugin WordPress plugin before 21.3 allows any unauthenticated user to rename uploaded files from users. Furthermore, due to the lack of validation in the destination filename, this could allow allow them to change the content of arbitrary files on the web server

CNA Affected

[
  {
    "product": "Frontend File Manager Plugin",
    "vendor": "Unknown",
    "versions": [
      {
        "lessThan": "21.3",
        "status": "affected",
        "version": "21.3",
        "versionType": "custom"
      }
    ]
  }
]

References

wpscan.com/vulnerability/00f76765-95af-4dbc-8c37-f1b15a0e8608

EPSS

0.001

Percentile

41.1%

JSON

Related for CVELIST:CVE-2022-3124