JetBackup < 2.0.9.9 - Directory Listing Exposing Backups
36Vexday Risk Score
Corrija em breve. Ela tem exploit funcional público.
ssvc Attendcvss 7.5epss 1.9%
probabilidade de exploração
1.9%top 22% das CVEs
exploração observada
nãonenhuma fonte reporta
The JetBackup WordPress plugin before 2.0.9.9 doesn't use index files to prevent public directory listing of sensitive directories in certain configurations, which allows malicious actors to leak backup files.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Produtos afetados
Unknown · JetBackup