CVE-2023-3814

Advanced File Manager < 5.1.1 - Admin+ Arbitrary File/Folder Access

Medium · published September 4, 2023

CVSS v3.1
4.9
EPSS
1%
Percentile
48.9
In the wild
Unconfirmed
What it is

The Advanced File Manager WordPress plugin before 5.1.1 does not adequately authorize its usage on multisite installations, allowing site admin users to list and read arbitrary files and folders on the server.

The record
Technical detail
CVSS v3.1
4.9 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00616 · 48.9th percentile
Published
2023-09-04T11:27Z
EPSS history
Timeline
  • 04 SEP 11:27Z
    Advanced File Manager < 5.1.1 - Admin+ Arbitrary File/Folder Access
    cvelistv5