medium6.5
CVE-2023-53907
Bludit versions before 3.13.0 contain an authenticated file download vulnerability in the Backup Plugin that allows logged-in users to access arbitrary files.
Impact
Bludit versions before 3.13.0 contain an authenticated file download vulnerability in the Backup Plugin that allows logged-in users to access arbitrary files. Attackers can exploit the plugin's download functionality by manipulating file path parameters to read sensitive system files through directory traversal.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Bludit | Bludit | before 3.13.1 |