CVE-2022-2544 - Ninja Job Board < 1.3.3 - Resume Disclosure via Directory Listing

Back Back to CVE browser

HIGH

Ninja Job Board < 1.3.3 - Resume Disclosure via Directory Listing

Published Aug 22, 2022

7.5

HIGH

CVSS 3.1

EPSS 4.27%

Description

The Ninja Job Board WordPress plugin before 1.3.3 does not protect the directory where it stores uploaded resumes, making it vulnerable to unauthenticated Directory Listing which allows the download of uploaded resumes.

Affected products

Vendor n/a Product Ninja Job Board – Ultimate WordPress Job Board Plugin Default
n/a
- Version
  1.3.3
  Status
  affected
  Constraints
  <1.3.3

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

Ninja Job Board – Ultimate WordPress Job Board Plugin

n/a

Version	Status	Constraints
1.3.3	affected	<1.3.3

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-425

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-34798
Advisory
https://plugins.trac.wordpress.org/changeset/2758420/ninja-job-board/trunk/includes/Classes/File/FileHandler.php?old=2126467&old_path=ninja-job-board%2Ftrunk%2Fincludes%2FClasses%2FFile%2FFileHandler.php
x_refsource_CONFIRMPatchThird Party Advisory
https://wpscan.com/vulnerability/a9bcc68c-eeda-4647-8463-e7e136733053
x_refsource_MISCExploitThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-34798		Advisory
https://plugins.trac.wordpress.org/changeset/2758420/ninja-job-board/trunk/includes/Classes/File/FileHandler.php?old=2126467&old_path=ninja-job-board%2Ftrunk%2Fincludes%2FClasses%2FFile%2FFileHandler.php		x_refsource_CONFIRMPatchThird Party Advisory
https://wpscan.com/vulnerability/a9bcc68c-eeda-4647-8463-e7e136733053		x_refsource_MISCExploitThird Party Advisory