CVE-2024-13791CWE-23

Bit Assist <= 1.5.2 - Path Traversal to Authenticated (Administrator+) Arbitrary File Read via downloadResponseFile Function

Medium · published February 14, 2025

CVSS v3.1
4.9
EPSS
1%
Percentile
51.2
In the wild
Unconfirmed
What it is

Bit Assist plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.5.2 via the downloadResponseFile() function. This makes it possible for authenticated attackers, with Administrator-level access and above, to read the contents of arbitrary files on the server, which can contain sensitive information.

The record
Technical detail
CVSS v3.1
4.9 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00665 · 51.2th percentile
Weakness
CWE-23 · Relative Path Traversal
Published
2025-02-14T11:10Z
EPSS history
Timeline
  • 14 FEB 11:10Z
    Bit Assist <= 1.5.2 - Path Traversal to Authenticated (Administrator+) Arbitrary File Read via downloadResponseFile Function
    cvelistv5