CVE-2023-4836

EUVD-2023-54677 · Published Oct 31, 2023

The WordPress File Sharing Plugin WordPress plugin before 2.0.5 does not check authorization before displaying files and folders, allowing users to gain access to those filed by manipulating IDs which can easily be brute forced

Technologies

Userprivatefiles Wordpress File Sharing Plugin

Weaknesses

CWE-639

CVSS scores

v3.14.3CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

MITRE ATT&CK

Inferred

Where this vulnerability fits in an attack

ReconImpact

Initial Access

T1190Exploit Public-Facing Application

References

https://research.cleantalk.org/cve-2023-4836-user-private-files-idor-to-sensitive-data-and-private-files-exposure-leak-of-info-poc
https://wpscan.com/vulnerability/c17f2534-d791-4fe3-b45b-875777585dc6

Potentially impacted assets

See if this affects your attack surface