Vulnerabilities > CVE-2023-24416 - Unspecified vulnerability in Grimmdude ALL in ONE Favicon

CVSS 6.5 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

HIGH

Confidentiality impact

NONE

Integrity impact

HIGH

Availability impact

HIGH

network

low complexity

grimmdude

NVD

Published: 2024-02-23

Updated: 2025-02-26

Summary

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Arne Franken All In One Favicon.This issue affects All In One Favicon: from n/a through 4.7.

Vulnerable Configurations

Part	Description	Count
Application	Grimmdude Grimmdude ALL IN ONE Favicon *	1

References

https://patchstack.com/database/vulnerability/all-in-one-favicon/wordpress-all-in-one-favicon-plugin-4-7-arbitrary-file-deletion-vulnerability?_s_id=cve
https://patchstack.com/database/vulnerability/all-in-one-favicon/wordpress-all-in-one-favicon-plugin-4-7-arbitrary-file-deletion-vulnerability?_s_id=cve