UBUNTU-CVE-2022-3124
Dashboard / Vulnerabilities / UBUNTU-CVE-2022-3124
Summary:
Details: The Frontend File Manager Plugin WordPress plugin before 21.3 allows any unauthenticated user to rename uploaded files from users. Furthermore, due to the lack of validation in the destination filename, this could allow allow them to change the content of arbitrary files on the web server
References: https://ubuntu.com/security/CVE-2022-3124, https://wpscan.com/vulnerability/00f76765-95af-4dbc-8c37-f1b15a0e8608, https://www.cve.org/CVERecord?id=CVE-2022-3124
Affected packages
Package
Name: wordpress
Purl: pkg:deb/ubuntu/wordpress?arch=source&distro=xenial
Affected ranges
Type: ECOSYSTEM
Events:
Introduced- 0
Fixed -None
Affected versions
4.3+dfsg-1
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
