Lucene search
Dmitrii IgnatyevWPVDB-ID:2A4557E2-B764-4678-A6D6-AF39DD1BA76BHistoryFeb 20, 2024 - 12:00 a.m.
Backup Bolt < 1.4.0 - Sensitive Data Exposure
2024-02-2000:00:00
Dmitrii Ignatyev
wpscan.com
3
backup bolt
information exposure
debug logs
unauthenticated attackers
sensitive information
error log
software
Description The plugin is vulnerable to Information Exposure via the unprotected access of debug logs. This makes it possible for unauthenticated attackers to retrieve the debug log which may contain information like system errors which could contain sensitive information.
PoC
Access the error log at: http://example.com/wordpress/babo-background-error.log
References
Related
nvd
nvd
CVE-2023-7236
2024-03-18 19:15:06
vulnrichment
vulnrichment
CVE-2023-7236 Backup Bolt <= 1.3.0 - Sensitive Data Exposure
2024-03-18 19:05:53
wpexploit
wpexploit
Backup Bolt < 1.4.0 - Sensitive Data Exposure
2024-02-20 00:00:00
cvelist
cvelist
CVE-2023-7236 Backup Bolt <= 1.3.0 - Sensitive Data Exposure
2024-03-18 19:05:53
cve
cve
CVE-2023-7236
2024-03-18 19:15:06
wordfence
wordfence
AI Score
9.2
Confidence
High
EPSS
0
Percentile
9.0%
Related for WPVDB-ID:2A4557E2-B764-4678-A6D6-AF39DD1BA76B