CVE-2022-2926

CVSS v3 4.9 MEDIUM

4.9^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 1.2 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

T

he Download Manager WordPress plugin before 3.2.55 does not validate one of its settings, which could allow high privilege users such as admin to list and read arbitrary files and folders outside of the blog directory

References

Link	Resource
https://wpscan.com/vulnerability/2a440e1a-a7e4-4106-839a-d93895e16785	Exploit Third Party Advisory
https://wpscan.com/vulnerability/2a440e1a-a7e4-4106-839a-d93895e16785	Exploit Third Party Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:adobe:download_manager:*:*:*:*:*:*:*:*

History

21 Nov 2024, 07:01

Type	Values Removed	Values Added
References	~~() https://wpscan.com/vulnerability/2a440e1a-a7e4-4106-839a-d93895e16785 - Exploit, Third Party Advisory~~	() https://wpscan.com/vulnerability/2a440e1a-a7e4-4106-839a-d93895e16785 - Exploit, Third Party Advisory

Information

Published : 2022-09-26 13:15

Updated : 2025-05-21 17:15

NVD link : CVE-2022-2926

Mitre link : CVE-2022-2926

CVE.ORG link : CVE-2022-2926

JSON object : View

Products Affected

download_manager

CWE

CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

{"id": "CVE-2022-2926", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "[email protected]", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.9, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 1.2}, {"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.9, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 1.2}]}, "published": "2022-09-26T13:15:10.577", "references": [{"url": "https://wpscan.com/vulnerability/2a440e1a-a7e4-4106-839a-d93895e16785", "tags": ["Exploit", "Third Party Advisory"], "source": "[email protected]"}, {"url": "https://wpscan.com/vulnerability/2a440e1a-a7e4-4106-839a-d93895e16785", "tags": ["Exploit", "Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Secondary", "source": "[email protected]", "description": [{"lang": "en", "value": "CWE-22"}]}], "descriptions": [{"lang": "en", "value": "The Download Manager WordPress plugin before 3.2.55 does not validate one of its settings, which could allow high privilege users such as admin to list and read arbitrary files and folders outside of the blog directory"}, {"lang": "es", "value": "El plugin Download Manager de WordPress versiones anteriores a 3.2.55, no comprueba una de sus configuraciones, lo que podr\u00eda permitir a usuarios con altos privilegios, como el administrador, listar y leer archivos y carpetas arbitrarias fuera del directorio del blog\n"}], "lastModified": "2025-05-21T17:15:53.663", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:adobe:download_manager:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5A611139-199C-42CB-9928-BA3CDDDBB92A", "versionEndExcluding": "3.2.55"}], "operator": "OR"}]}], "sourceIdentifier": "[email protected]"}