Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

1 record

Vendor: Aceide Project Component: Aceide Clear all filters
TI-2021-06834 CVE-2021-24549 · GHSA-w5m3-5gh7-fq59

AceIDE <= 2.6.2 - Authenticated (admin+) Arbitrary File Access

Priority LOW 26

The AceIDE WordPress plugin through 2.6.2 does not sanitise or validate the user input which is appended to system paths before using it in various actions, such as to read arbitrary files from the server.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.0157 Published 2021-08-23 No fix listed CWE-22