Path Traversal Vulnerability in Newspack Blocks

CVE-2024-37423

Summary

A Path Traversal vulnerability exists in Automattic's Newspack Blocks, enabling attackers to bypass security measures and access restricted directories. This vulnerability specifically affects versions up to 3.0.8, allowing malicious actors to manipulate file paths to gain unauthorized access to sensitive information. The flaw's exploitation could lead to severe implications for the security and integrity of affected installations.

References