Path Traversal Vulnerability Affects CataBlog

CVE-2023-47843

Summary

A vulnerability has been identified in the CataBlog plugin by Zachary Segal, allowing for improper limitation of a pathname leading to potential path traversal attacks. This issue may let unauthorized users access restricted directories and execute arbitrary file deletions, exposing sensitive data and compromising the website's integrity. The vulnerability affects versions from n/a through 1.7.0, necessitating prompt remediation measures to secure affected installations.

References