CVE-2017-20086

Summary

A vulnerability, which was classified as critical, was found in VaultPress Plugin 1.8.4. This affects an unknown part. The manipulation leads to code injection. It is possible to initiate the attack remotely.

Affected Software

Weaknesses

• CWE-94: CWE-94 Code Injection

ADP Enrichment

CVE Program Container

Additional References

• http://seclists.org/fulldisclosure/2017/Feb/95
• https://vuldb.com/?id.97383

CISA ADP Vulnrichment

• SSVC:
• Exploitation: poc
  • Automatable: no
  • Technical Impact: partial

References

• http://seclists.org/fulldisclosure/2017/Feb/95
• https://vuldb.com/?id.97383

• ←Previous
• Next→