CVE-2023-7165
JetBackup < 2.0.9.9 - Directory Listing Exposing Backups
High · published February 27, 2024
What it is
The JetBackup WordPress plugin before 2.0.9.9 doesn't use index files to prevent public directory listing of sensitive directories in certain configurations, which allows malicious actors to leak backup files.
The record
Technical detail
- CVSS v3.1
- 7.5 · HIGH
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- CVSS v4.0
- Not supplied
- EPSS
- 0.01900 · 79.5th percentile
- Published
- 2024-02-27T08:30Z
EPSS history
Timeline