CVE-2022-2544CWE-425

Ninja Job Board < 1.3.3 - Resume Disclosure via Directory Listing

published August 22, 2022

CVSS
—
EPSS
5%
Percentile
91.5
In the wild
Unconfirmed
What it is

The Ninja Job Board WordPress plugin before 1.3.3 does not protect the directory where it stores uploaded resumes, making it vulnerable to unauthenticated Directory Listing which allows the download of uploaded resumes.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04551 · 91.5th percentile
Weakness
CWE-425 · Direct Request ('Forced Browsing')
Published
2022-08-22T15:03Z
EPSS history
Timeline
  • 22 AUG 15:03Z
    Ninja Job Board < 1.3.3 - Resume Disclosure via Directory Listing
    cvelistv5