nvd-json-data-feeds/CVE-2023/CVE-2023-59xx/CVE-2023-5907.json

{
  "id": "CVE-2023-5907",
  "sourceIdentifier": "contact@wpscan.com",
  "published": "2023-12-11T20:15:07.263",
  "lastModified": "2023-12-12T13:43:48.853",
  "vulnStatus": "Undergoing Analysis",
  "descriptions": [
    {
      "lang": "en",
      "value": "The File Manager WordPress plugin before 6.3 does not restrict the file managers root directory, allowing an administrator to set a root outside of the WordPress root directory, giving access to system files and directories even in a multisite setup, where site administrators should not be allowed to modify the sites files."
    },
    {
      "lang": "es",
      "value": "El complemento File Manager de WordPress anterior a 6.3 no restringe el directorio ra\u00edz de los administradores de archivos, lo que permite a un administrador establecer una ra\u00edz fuera del directorio ra\u00edz de WordPress, brindando acceso a archivos y directorios del sistema incluso en una configuraci\u00f3n de m\u00faltiples sitios, donde los administradores de sitios no deber\u00edan tener permiso para modificar los archivos del sitio."
    }
  ],
  "metrics": {},
  "references": [
    {
      "url": "https://wpscan.com/vulnerability/f250226f-4a05-4d75-93c4-5444a4ce919e",
      "source": "contact@wpscan.com"
    }
  ]
}