Beschreibung
Google Drive for WordPress 2.2 contains a path traversal vulnerability that allows unauthenticated attackers to read arbitrary files by injecting directory traversal sequences in the file_name parameter. Attackers can send POST requests to gdrive-ajaxs.php with the ajaxstype parameter set to del_fl_bkp and file_name containing traversal sequences ../../wp-config.php to access sensitive configuration files.
CVSS 7.5EPSS 0.641%Risiko 0.79
Quelle öffnen- Veröffentlicht
- 2026-05-17 13:16:44
- Betroffene Versionen
- ==2.2
- Typ
- Installed app
- Vektor
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N