Path Traversal Vulnerability in PowerPack Lite for Beaver Builder
CVE-2024-37410
7.2HIGH
Key Information:
- Vendor
- WordPress
- Vendor
- CVE Published:
- 9 July 2024
Summary
A Path Traversal vulnerability exists in PowerPack Lite for Beaver Builder, allowing attackers to bypass security restrictions and access files and directories that may be outside of the intended scope. This improper limitation poses serious risks as it can be exploited by malicious users to retrieve sensitive information from the system. The issue affects versions of PowerPack Lite from n/a through 1.3.0.3, necessitating immediate attention from users to mitigate potential threats and protect sensitive data.
Affected Version(s)
PowerPack Lite for Beaver Builder <= 1.3.0.3
References
CVSS V3.1
Score:
7.2
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Credit
João Pedro Soares de Alcântara - Kinorth (Patchstack Alliance)