Beveiligingsadvies

CVE-2022-1659

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2022-06-13 13:17:10

Laatst bijgewerkt 2025-01-31 18:52:43

Toegewezen door Wordfence

CVSS-score 5.4

Status PUBLISHED

Beschrijving

Vulnerable versions of the JupiterX Core (<= 2.0.6) plugin register an AJAX action jupiterx_conditional_manager which can be used to call any function in the includes/condition/class-condition-manager.php file by sending the desired function to call in the sub_action parameter. This can be used to view site configuration and logged-in users, modify post conditions, or perform a denial of service attack.

← Alle CVE's bekijken Bekijk op cve.org ↗