{"id":3425,"date":"2024-04-03T15:45:24","date_gmt":"2024-04-03T15:45:24","guid":{"rendered":"http:\/\/127.0.0.1\/vulnerabilidad-de-traversing-de-directorios-en-file-manager-7-2-5-autenticado-administrador\/"},"modified":"2024-04-03T15:45:24","modified_gmt":"2024-04-03T15:45:24","slug":"vulnerabilidad-de-traversing-de-directorios-en-file-manager-7-2-5-autenticado-administrador","status":"publish","type":"post","link":"http:\/\/127.0.0.1\/vulnerabilidad-de-traversing-de-directorios-en-file-manager-7-2-5-autenticado-administrador\/","title":{"rendered":"Vulnerabilidad de Traversing de Directorios en File Manager <= 7.2.5 – Autenticado (Administrador+)"},"content":{"rendered":"
<\/p>\n
El plugin File Manager para WordPress es vulnerable a Traversing de Directorios en todas las versiones hasta, e incluyendo, la 7.2.5 a trav\u00e9s de la funci\u00f3n fm_download_backup. Esto permite a atacantes autenticados, con acceso de administrador y superior, leer el contenido de archivos zip arbitrarios en el servidor, los cuales pueden contener informaci\u00f3n sensible. La […]<\/p>\n","protected":false},"author":0,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[1135],"class_list":["post-3425","post","type-post","status-publish","format-standard","hentry","category-uncategorized","tag-cve-2024-2654"],"yoast_head":"\n