4.3
Moyenne
CVE-2023-4297 The Mmm Simple File List WordPress plugin through 2.3 does not validate the generated path to list files from,…
Description
The Mmm Simple File List WordPress plugin through 2.3 does not validate the generated path to list files from, allowing any authenticated users, such as subscribers, to list the content of arbitrary directories.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Mmm Simple File List 2.3 | premières → 2.3 | Pas de correctif indiqué |
| mmm_simple_file_list 2.3 | premières → 2.3 | Pas de correctif indiqué |