未評価
Bludit 3.13.1 Authenticated Arbitrary File Download via Backup Plugin
CVE-2023-53907
SecPulse初出
原文の説明 取得元が公開している説明をそのまま載せています (多くは英語)。
Bludit versions before 3.13.1 contain an authenticated file download vulnerability in the Backup Plugin that allows logged-in users to access arbitrary files. Attackers can exploit the plugin's download functionality by manipulating file path parameters to read sensitive system files through directory traversal.
参照URL
- advisory github.com
- advisory nvd.nist.gov
- advisory vulncheck.com
- report exploit-db.com
- web bludit.com