← CVE Intelligence

CVE-2023-4297

Mmm Simple File List <= 2.3 - Subscriber+ Arbitrary Directory Listing PUBLISHED

Description (CNA)

The Mmm Simple File List WordPress plugin through 2.3 does not validate the generated path to list files from, allowing any authenticated users, such as subscribers, to list the content of arbitrary directories.

Affected (CNA)

Vendor / productVersions
Unknown / Mmm Simple File Listaffected 0 through 2.3

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.