Awaiting Analysis
CVE has been recently published to the CVE List and has been received by the NVD.

Products

YARPP

5.30.4

Source

audit@patchstack.com

CVE-2022-45374 details

Published : May 17, 2024, 7:15 a.m.
Last Modified : May 17, 2024, 6:36 p.m.

Description

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in YARPP allows PHP Local File Inclusion.This issue affects YARPP: from n/a through 5.30.4.

CVSS Score

1	2	3	4	5	6	7.7	8	9	10

Weakness

Weakness	Name	Description

CVSS Data

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact