CAS <= 1.0.0 - Unauthenticated Arbitrary File Access

2024-05-0200:00:00

Aly Khaled Aly Abd Al-aal

wpscan.com

cas

unauthenticated

arbitrary

file access

download

server

update

software

6.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

Description This plugin does not validate a path generated with user input when downloading files, allowing unauthenticated user to download arbitrary files from the server

PoC

https://example.com/wp-content/themes/cas/download.php?path=<>