CVE-2022-3124 - Frontend File Manager < 21.3 - Unauthenticated File Renaming

Back Back to CVE browser

MEDIUM

Frontend File Manager < 21.3 - Unauthenticated File Renaming

Published Oct 3, 2022

5.3

MEDIUM

CVSS 3.1

EPSS 8.26%

Description

The Frontend File Manager Plugin WordPress plugin before 21.3 allows any unauthenticated user to rename uploaded files from users. Furthermore, due to the lack of validation in the destination filename, this could allow allow them to change the content of arbitrary files on the web server

Affected products

Vendor n/a Product Frontend File Manager Plugin Default
n/a
- Version
  21.3
  Status
  affected
  Constraints
  <21.3

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

Frontend File Manager Plugin

n/a

Version	Status	Constraints
21.3	affected	<21.3

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-862

Missing Authorization

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-42551
Advisory
https://wpscan.com/vulnerability/00f76765-95af-4dbc-8c37-f1b15a0e8608
x_refsource_MISCExploitThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-42551		Advisory
https://wpscan.com/vulnerability/00f76765-95af-4dbc-8c37-f1b15a0e8608		x_refsource_MISCExploitThird Party Advisory