Περιγραφή
Google Drive for WordPress 2.2 contains a path traversal vulnerability that allows unauthenticated attackers to read arbitrary files by injecting directory traversal sequences in the file_name parameter. Attackers can send POST requests to gdrive-ajaxs.php with the ajaxstype parameter set to del_fl_bkp and file_name containing traversal sequences ../../wp-config.php to access sensitive configuration files.
CVSS 7.5EPSS 0.641%Κίνδυνος 0.79
Προβολή πηγής- Δημοσίευση
- 2026-05-17 13:16:44
- Επηρεαζόμενες εκδόσεις
- ==2.2
- Τύπος
- Installed app
- Διάνυσμα
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N