CAS <= 1.0.0 - Unauthenticated Arbitrary File Access

2024-05-0200:00:00

Aly Khaled Aly Abd Al-aal

cas fileaccess securityupdate exploit may2024

7 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

Description This plugin does not validate a path generated with user input when downloading files, allowing unauthenticated user to download arbitrary files from the server

https://example.com/wp-content/themes/cas/download.php?path=<<FILE_TO_DOWNLOAD>>