Unauthorized Access to Sensitive Information in Upload Resume

CVE-2023-25965

What is CVE-2023-25965?

The vulnerability in mbbhatti's Upload Resume plugin allows unauthorized actors to access sensitive information inadvertently exposed during the handling of user uploads. This issue stems from improper data validation and insufficient access controls, making it possible for an attacker to retrieve confidential user data. It is crucial for users and administrators of the Upload Resume plugin, particularly versions 1.2.0 and earlier, to assess their current security posture and implement the necessary patches to mitigate potential data risks.

References