Lucene search
HistoryJul 13, 2024 - 6:15 a.m.
CVE-2024-5450
bug library
wordpress
unauthenticated user
php file upload
cve-2024-5450
CVSS3
9.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
EPSS
0
Percentile
9.3%
The Bug Library WordPress plugin before 2.1.1 does not check the file type on user-submitted bug reports, allowing an unauthenticated user to upload PHP files
Related
cvelist
cvelist
CVE-2024-5450 Bug Library < 2.1.1 - Unauthenticated RCE
2024-07-13 06:00:11
cve
cve
CVE-2024-5450
2024-07-13 06:15:04
vulnrichment
vulnrichment
CVE-2024-5450 Bug Library < 2.1.1 - Unauthenticated RCE
2024-07-13 06:00:11
CVSS3
9.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
EPSS
0
Percentile
9.3%
Related for NVD:CVE-2024-5450