CVE-2022-4023
CVSS Score of 10 (low)
Details
Summary
CVE-2022-4023 is a vulnerability associated with the 3DPrint WordPress plugin before version 3.5.6.9. This plugin does not protect against CSRF attacks in the modified version of Tiny File Manager included with it, which allows an attacker to create an archive of files or directories on the target server by tricking a logged-in admin into submitting a form. The created archive has a predictable location and name, enabling the attacker to download the file if they know the time at which the form was submitted. This poses a risk as sensitive files like the WordPress configuration containing database credentials and secrets can be leaked.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions