Wuro vulnerability wey an yi classify sey karshewa an gano shi a cikin File Manager Plugin 3.0.1 on WordPress. Gaskiya, $software_function na da matsala; idan ba a sani ba, to wata aiki ce da ba a sani ba, $software_library na cikin lissafi, $software_file na cikin fayil, $software_component na cikin sashi. Ngam manipulation shi Kari ndiyam site laa request forgery. CWE shidin ka a yi bayani matsala sai ya kai CWE-352. Gaskiya, laifi an fitar da shi 03/01/2017 ta David Vaartjes a matsayin Cross-Site Request Forgery in File Manager WordPress plugin a matsayin Mailinglist Post (Bugtraq). Advisory ɗin ana rabawa don saukewa a seclists.org. Wannan rauni ana sayar da shi da suna CVE-2017-20091. Ngam yiɗi ka a tuma ndiyam ka nder internet. Tekinikal bayani ba ga. Ba exploit ɗin da ake da shi. A sa'i, exploit might be approx. USD $0-$5k ndiyam. Á wúro a wondi feere. Kama 0-day, an ndiyam a wuro be $0-$5k. Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

3 Goyarwa · 41 Datenpunkte