← CVE Intelligence

CVE-2023-0331

Correos Oficial <= 1.2.0.2 - Unauthenticated Arbitrary File Download PUBLISHED

Description (CNA)

The Correos Oficial WordPress plugin through 1.2.0.2 does not have an authorization check user input validation when generating a file path, allowing unauthenticated attackers to download arbitrary files from the server.

Affected (CNA)

Vendor / productVersions
Unknown / Correos Oficialaffected 0 through 1.2.0.2

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.