The WordPress File Sharing Plugin WordPress plugin before 2.0.5 does not check authorization before displaying files and folders, allowing users to gain access to those filed by manipulating IDs which can easily be brute forced
References
Link | Resource |
---|---|
https://research.cleantalk.org/cve-2023-4836-user-private-files-idor-to-sensitive-data-and-private-files-exposure-leak-of-info-poc | Exploit Third Party Advisory |
https://wpscan.com/vulnerability/c17f2534-d791-4fe3-b45b-875777585dc6 | Exploit Third Party Advisory |
https://research.cleantalk.org/cve-2023-4836-user-private-files-idor-to-sensitive-data-and-private-files-exposure-leak-of-info-poc | Exploit Third Party Advisory |
https://wpscan.com/vulnerability/c17f2534-d791-4fe3-b45b-875777585dc6 | Exploit Third Party Advisory |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 08:36
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2023-10-31 14:15
Updated : 2024-11-21 08:36
NVD link : CVE-2023-4836
Mitre link : CVE-2023-4836
CVE.ORG link : CVE-2023-4836
JSON object : View
Products Affected
userprivatefiles
- wordpress_file_sharing_plugin
CWE
CWE-639
Authorization Bypass Through User-Controlled Key