The Backup Migration WordPress plugin before 1.3.6 stores in-progress backups information in easy to find, publicly-accessible files, which may allow attackers monitoring those to leak sensitive information from the site's backups.
References
| Link | Resource |
|---|---|
| https://research.cleantalk.org/cve-2023-6271-backup-migration-unauth-sensitive-data-exposure-to-full-control-of-the-site-poc-exploit | Exploit Third Party Advisory |
| https://wpscan.com/vulnerability/7ac217db-f332-404b-a265-6dc86fe747b9 | Exploit Third Party Advisory |
Configurations
History
08 Jan 2024, 17:31
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.5 |
| CPE | cpe:2.3:a:backupbliss:backup_migration:*:*:*:*:*:wordpress:*:* | |
| References | () https://research.cleantalk.org/cve-2023-6271-backup-migration-unauth-sensitive-data-exposure-to-full-control-of-the-site-poc-exploit - Exploit, Third Party Advisory | |
| References | () https://wpscan.com/vulnerability/7ac217db-f332-404b-a265-6dc86fe747b9 - Exploit, Third Party Advisory | |
| Summary | (es) El complemento Backup Migration de WordPress anterior a 1.3.6 almacena información de las copias de seguridad en progreso en archivos fáciles de encontrar y de acceso público, lo que puede permitir a los atacantes monitorearlos para filtrar información confidencial de las copias de seguridad del sitio. | |
| First Time |
Backupbliss
Backupbliss backup Migration |
|
| CWE | NVD-CWE-noinfo |
02 Jan 2024, 13:47
| Type | Values Removed | Values Added |
|---|---|---|
| Summary |
|
01 Jan 2024, 15:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-01-01 15:15
Updated : 2024-01-08 17:31
NVD link : CVE-2023-6271
Mitre link : CVE-2023-6271
CVE.ORG link : CVE-2023-6271
JSON object : View
Products Affected
backupbliss
- backup_migration
CWE