| Vulnerability Name: | CVE-2023-2745 (CCN-255986) | ||||||||||||
| Assigned: | 2023-05-16 | ||||||||||||
| Published: | 2023-05-16 | ||||||||||||
| Updated: | 2023-06-21 | ||||||||||||
| Summary: | |||||||||||||
| CVSS v3 Severity: | 6.1 Medium (CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) 5.3 Medium (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:U/RL:O/RC:C)
4.7 Medium (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N/E:U/RL:O/RC:C)
| ||||||||||||
| CVSS v2 Severity: | 4.0 Medium (CCN CVSS v2 Vector: AV:N/AC:H/Au:N/C:P/I:P/A:N)
| ||||||||||||
| Vulnerability Consequences: | Obtain Information | ||||||||||||
| References: | Source: MITRE Type: CNA CVE-2023-2745 Source: security@wordfence.com Type: Third Party Advisory, VDB Entry security@wordfence.com Source: CCN Type: WordPress Web site Changeset 55765 Source: security@wordfence.com Type: Patch security@wordfence.com Source: XF Type: UNKNOWN wordpresscore-cve20232745-dir-trav(255986) Source: security@wordfence.com Type: UNKNOWN security@wordfence.com Source: CCN Type: Packet Storm Security [05-17-2023] WordPress Core 6.2 XSS / CSRF / Directory Traversal Source: security@wordfence.com Type: Release Notes security@wordfence.com Source: security@wordfence.com Type: Third Party Advisory security@wordfence.com Source: CCN Type: Wordfence Web site WordPress Core < 6.2.1 - Directory Traversal | ||||||||||||
| Vulnerable Configuration: | Configuration CCN 1: Denotes that component is vulnerable | ||||||||||||
| BACK | |||||||||||||