{ "id": "CVE-2024-4388", "sourceIdentifier": "contact@wpscan.com", "published": "2024-05-23T06:15:11.493", "lastModified": "2024-05-24T01:15:30.977", "vulnStatus": "Awaiting Analysis", "descriptions": [ { "lang": "en", "value": "This does not validate a path generated with user input when downloading files, allowing unauthenticated user to download arbitrary files from the server" }, { "lang": "es", "value": "Esto no valida una ruta generada con la entrada del usuario al descargar archivos, lo que permite a un usuario no autenticado descargar archivos arbitrarios desde el servidor." } ], "metrics": {}, "references": [ { "url": "https://wpscan.com/vulnerability/5c791747-f60a-40a7-94fd-e4b9bb5ea2b0/", "source": "contact@wpscan.com" } ] }