CVE-2022-2544

Ninja Job Board < 1.3.3 - Resume Disclosure via Directory Listing

State: Published
Severity: Not scored
Published: Aug 22, 2022
Updated: Aug 3, 2024
Reserved: Jul 26, 2022

Description

The Ninja Job Board WordPress plugin before 1.3.3 does not protect the directory where it stores uploaded resumes, making it vulnerable to unauthenticated Directory Listing which allows the download of uploaded resumes.

Scores

The record has no CVSS score.

Weaknesses

CWE-425 Direct Request ('Forced Browsing')

Affected Products

Product	Versions
Ninja Job Board – Ultimate WordPress Job Board PluginUnknown	1.3.3 to before 1.3.3Affected

References

https://wpscan.com/vulnerability/a9bcc68c-eeda-4647-8463-e7e136733053
https://plugins.trac.wordpress.org/changeset/2758420/ninja-job-board/trunk/includes/Classes/File/FileHandler.php?old=2126467&old_path=ninja-job-board%2Ftrunk%2Fincludes%2FClasses%2FFile%2FFileHandler.php

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.