Vulnerabilities > CVE-2022-0779 - Unspecified vulnerability in User-Meta User Meta User Profile Builder and User Management

CVSS 6.5 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

HIGH

Integrity impact

NONE

Availability impact

NONE

network

low complexity

user-meta

NVD

Published: 2022-06-08

Updated: 2024-11-21

Summary

The User Meta WordPress plugin before 2.4.4 does not validate the filepath parameter of its um_show_uploaded_file AJAX action, which could allow low privileged users such as subscriber to enumerate the local files on the web server via path traversal payloads

Vulnerable Configurations

Part	Description	Count
Application	User-Meta User Meta User Meta User Profile Builder AND User Management 1.0.0 User Meta User Meta User Profile Builder AND User Management 1.0.1 User Meta User Meta User Profile Builder AND User Management 1.0.2 User Meta User Meta User Profile Builder AND User Management 1.0.3 User Meta User Meta User Profile Builder AND User Management 1.0.5 User Meta User Meta User Profile Builder AND User Management 1.1.0 User Meta User Meta User Profile Builder AND User Management 1.1.1 User Meta User Meta User Profile Builder AND User Management 1.1.2 User Meta User Meta User Profile Builder AND User Management 1.1.3 User Meta User Meta User Profile Builder AND User Management 1.1.4 User Meta User Meta User Profile Builder AND User Management 1.1.4.1 User Meta User Meta User Profile Builder AND User Management 1.1.5 User Meta User Meta User Profile Builder AND User Management 1.1.6 User Meta User Meta User Profile Builder AND User Management 1.1.7 User Meta User Meta User Profile Builder AND User Management 1.1.7.1 User Meta User Meta User Profile Builder AND User Management 1.2 User Meta User Meta User Profile Builder AND User Management 1.2.1 User Meta User Meta User Profile Builder AND User Management 1.3 User Meta User Meta User Profile Builder AND User Management 1.4 User Meta User Meta User Profile Builder AND User Management 1.4.1 User Meta User Meta User Profile Builder AND User Management 1.4.2 User Meta User Meta User Profile Builder AND User Management 1.4.3 User Meta User Meta User Profile Builder AND User Management 2.0 User Meta User Meta User Profile Builder AND User Management 2.0.1 User Meta User Meta User Profile Builder AND User Management 2.0.2 User Meta User Meta User Profile Builder AND User Management 2.1 User Meta User Meta User Profile Builder AND User Management 2.2 User Meta User Meta User Profile Builder AND User Management 2.2.1 User Meta User Meta User Profile Builder AND User Management 2.3 User Meta User Meta User Profile Builder AND User Management 2.4 User Meta User Meta User Profile Builder AND User Management 2.4.1 User Meta User Meta User Profile Builder AND User Management 2.4.2 User Meta User Meta User Profile Builder AND User Management 2.4.3	33

Summary

Vulnerable Configurations

References