CVE-2022-31474

概要

参考情報

• ithemes.com/blog/wordpress-vulnerability-report-special-edition-september-6-2022-backupbuddy · Vendor Advisory
• patchstack.com/database/vulnerability/backupbuddy/wordpress-backup-buddy-plugin-8-5-8-0-8-7-4-1-unauthenticated-path-traversal-arbitrary-file-download-vulnerability · Third Party Advisory

backupbuddy のその他の脆弱性

• CVE-2022-4897中 6.1The BackupBuddy WordPress plugin before 8.8.3 does not sanitise and escape some parameters before outputting them back in various places, le…
• CVE-2013-2744中 5.0importbuddy.php in the BackupBuddy plugin 2.2.25 for WordPress allows remote attackers to obtain configuration information via a step 0 phpi…
• CVE-2013-2743高 7.5importbuddy.php in the BackupBuddy plugin 1.3.4, 2.1.4, 2.2.25, 2.2.28, and 2.2.4 for WordPress allows remote attackers to bypass authentica…
• CVE-2013-2742高 7.5importbuddy.php in the BackupBuddy plugin 1.3.4, 2.1.4, 2.2.25, 2.2.28, and 2.2.4 for WordPress does not reliably delete itself after comple…
• CVE-2013-2741高 7.5importbuddy.php in the BackupBuddy plugin 1.3.4, 2.1.4, 2.2.25, 2.2.28, and 2.2.4 for WordPress does not require that authentication be enab…