Lucene search
+L

1 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/02/28 12:00 a.m.•3 views

CVE-2022-0377: Use of a Broken or Risky Cryptographic Algorithm

Users of the LearnPress WordPress plugin before 4.1.5 can upload an image as a profile avatar after the registration. After this process the user crops and saves the image. Then a "POST" request that contains user supplied name of the image is sent to the server for renaming and cropping of the...

4.3CVSS5.8AI score0.03205EPSS
SaveExploits5References2
Rows per page
Query Builder