logo

Database

Lack of data validation - Path Traversal In wordpress

Description

directory traversal

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Component
Affected version
Patched versions

Aliases

1. CVE-2019-89432. NVD-2019-89433. OSV-DEBIAN-2019-89434. OSV-2019-89435. SECURITY-TRACKER-CVE-2019-8943

References

1. https://www.exploit-db.com/exploits/466622. https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-8943.yaml3. https://github.com/oussama-rahali/CVE-2019-89434. https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/wp_crop_rce.rb

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.