CVE-2014-5368

Directory traversal vulnerability in the file_get_contents function in downloadfiles/download.php in the WP Content Source Control (wp-source-control) plugin…

published August 22, 2014

CVSS

—

EPSS

19%

Percentile

97.3

In the wild

Unconfirmed

What it is

Directory traversal vulnerability in the file_get_contents function in downloadfiles/download.php in the WP Content Source Control (wp-source-control) plugin 3.0.0 and earlier for WordPress allows remote attackers to read arbitrary files via a .. (dot dot) in the path parameter.

The record

Technical detail

CVSS: Not scored
CVSS v4.0: Not supplied
EPSS: 0.18817 · 97.3th percentile
Published: 2014-08-22T14:00Z

EPSS history

Timeline

22 AUG 14:00Z
Directory traversal vulnerability in the file_get_contents function in downloadfiles/download.php in the WP Content Source Control (wp-source-control) plugin…
cvelistv5