CVE-2023-6421

Download Manager < 3.2.83 - Unauthenticated Protected File Download Password Leak

High · published January 1, 2024

CVSS v3.1
7.5
EPSS
2%
Percentile
84.2
In the wild
Unconfirmed
What it is

The Download Manager WordPress plugin before 3.2.83 does not protect file download's passwords, leaking it upon receiving an invalid one.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.02437 · 84.2th percentile
Published
2024-01-01T14:18Z
EPSS history
Timeline
  • 01 JAN 14:18Z
    Download Manager < 3.2.83 - Unauthenticated Protected File Download Password Leak
    cvelistv5