CVE-2017-11658
PoC —CVSS 3.0
7.5 high
EPSS
3%p88
Published
()
Modified
Description
In the WP Rocket plugin 2.9.3 for WordPress, the Local File Inclusion mitigation technique is to trim traversal characters (..) -- however, this is insufficient to stop remote attacks and can be bypassed by using 0x00 bytes, as demonstrated by a .%00.../.%00.../ attack.
- Vendors
- wp-rocket
- Products
- wp-rocket
- Ecosystems
- WordPress
- Weakness
- CWE-22
- Vector
- CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
In the news0 stories
No ingested article mentions this CVE yet.