CVE-2022-2926 — Download Manager < 3.2.55 - Admin+ Arbitrary File/Folder Access via Path Traversal

CVE-2022-2926

Download Manager < 3.2.55 - Admin+ Arbitrary File/Folder Access via Path Traversal PUBLISHED

Description (CNA)

The Download Manager WordPress plugin before 3.2.55 does not validate one of its settings, which could allow high privilege users such as admin to list and read arbitrary files and folders outside of the blog directory

Affected (CNA)

Vendor / product	Versions
Unknown / Download Manager	affected 3.2.55 before 3.2.55

CWE

CWE-22

References

https://wpscan.com/vulnerability/2a440e1a-a7e4-4106-839a-d93895e16785

ADP enrichment

CVE

No English description supplied.

https://wpscan.com/vulnerability/2a440e1a-a7e4-4106-839a-d93895e16785

CISA-ADP

No English description supplied.

No references supplied.