Lucene search
HistoryNov 27, 2023 - 5:15 p.m.
CVE-2023-4297
wordpress
file list
arbitrary directories
4.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
0.0004 Low
EPSS
Percentile
14.2%
The Mmm Simple File List WordPress plugin through 2.3 does not validate the generated path to list files from, allowing any authenticated users, such as subscribers, to list the content of arbitrary directories.
Affected configurations
Node
mediamanifestommm_simple_file_listRange≤2.3wordpress
Related
wpvulndb
wpvulndb
Mmm Simple File List <= 2.3 - Subscriber+ Arbitrary Directory Listing
2023-11-06 00:00:00
wpexploit
wpexploit
Mmm Simple File List <= 2.3 - Subscriber+ Arbitrary Directory Listing
2023-11-06 00:00:00
cvelist
cvelist
prion
prion
Design/Logic Flaw
2023-11-27 17:15:00
cve
cve
CVE-2023-4297
2023-11-27 17:15:08
wordfence
wordfence
4.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
0.0004 Low
EPSS
Percentile
14.2%
Related for NVD:CVE-2023-4297