Directory traversal

2021-07-0714:15:00

PRIOn knowledge base

www.prio-n.com

8.4 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

72.6%

JSON

Directory traversal in the Media File Organizer (aka media-file-organizer) plugin 1.0.1 for WordPress lets an attacker get access to files that are stored outside the web root folder via the items[] parameter in a move operation.

CPENameOperatorVersion
media_file_organizereq1.0.1

CPE	Name	Operator	Version
	media_file_organizer	eq	1.0.1

References

github.com/secwx/research/blob/main/cve/CVE-2020-24144.md

ru.wordpress.org/plugins/media-file-organizer/