CVE-2023-2117

CVSS 3.1 Score 7.8 of 10 (high)

Details

Published May 30, 2023

Updated: Jan 10, 2025

CWE ID 276

Summary

CVE-2023-2117 is a vulnerability affecting the Image Optimizer plugin for WordPress before version 1.0.27. This issue allows high-privileged users, including admins, to access file and directory names outside of the site's root by bypassing the insufficient sanitization of the 'dir' parameter in the 'get_subdirs' ajax action. This could potentially lead to unauthorized access or data leakages, making it essential for users to update the plugin to the latest version to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Android

Affected Vendors

Google

Advisories, Assessments, and Mitigations

https://app.recordedfuture.com/live/sc/entity/rpg87C
https://www.cve.org/CVERecord?id=CVE-2023-2117
https://nvd.nist.gov/vuln/detail/CVE-2023-2117

Back to Vulnerability Database

Platform Features

Products

Use Cases

Teams

Industries

Services

DRAT V2: Updated DRAT Emerges in TAG-140’s Arsenal

Threats to the 2025 NATO Summit

Artificial Eyes: Generative AI in China’s Military Intelligence

Know What Matters

For Customers

For Partners