CVE-2019-1010257
- State
- Published
- Severity
- Not scored
- Published
- Mar 27, 2019
- Updated
- Aug 5, 2024
- Reserved
- Mar 20, 2019
Description
An Information Disclosure / Data Modification issue exists in article2pdf_getfile.php in the article2pdf Wordpress plugin 0.24, 0.25, 0.26, 0.27. A URL can be constructed which allows overriding the PDF file's path leading to any PDF whose path is known and which is readable to the web server can be downloaded. The file will be deleted after download if the web server has permission to do so. For PHP versions before 5.3, any file can be read by null terminating the string left of the file extension.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
article2pdf Wordpress plug-inarticle2pdf |
|
References
- https://wordpress.org/support/topic/pdf-download-path-improperly-sanitised/
- 20190326 [article2pdf (Wordpress plug-in)] Multiple vulnerabilities (CVE-2019-1000031, CVE-2019-1010257)mailing-list
- https://packetstormsecurity.com/files/152236/WordPress-article2pdf-0.24-DoS-File-Deletion-Disclosure.html
- https://wpvulndb.com/vulnerabilities/9246
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.