Non notée
CVE-2021-24947 The RVM WordPress plugin before 6.4.2 does not have proper authorisation, CSRF checks and validation of the…
Description
The RVM WordPress plugin before 6.4.2 does not have proper authorisation, CSRF checks and validation of the rvm_upload_regions_file_path parameter in the rvm_import_regions AJAX action, allowing any authenticated user, such as subscriber, to read arbitrary files on the web server
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| RVM – Responsive Vector Maps 6.4 | premières → < 6.4.2 | 6.4.2 |