CVE-2023-29384

CVSS 3.1 Score 10.0 of 10 (high)

Details

Published Dec 20, 2023
Updated: Dec 28, 2023
CWE ID 434

Summary

CVE-2023-29384, also known as Unrestricted Upload of File with Dangerous Type vulnerability, affects the WordPress Job Board and Recruitment Plugin - JobWP version n/a through 2.0. The vulnerability allows for the unrestricted upload of files with dangerous types, posing a critical risk to organizations. It has a base severity rating of CRITICAL and a base score of 10.0 according to [email protected]. The exploitability score is 3.9, the integrity impact is high, and the confidentiality impact is also high. The vulnerability can be exploited over a network without requiring any privileges or user interaction. The attack complexity is low, but the availability impact is high. Remediation measures should be taken promptly to address this vulnerability and prevent potential unauthorized access or manipulation of files uploaded through the plugin.

Share

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2023-29384 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options