CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
What the vulnerability does
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Jordy Meow Media File Renamer: Rename Files (Manual, Auto & AI).This issue affects Media File Renamer: Rename Files (Manual, Auto & AI): from n/a through 5.6.9.
Explanation of Vulnerability in Simple Terms
Media File Renamer versions up to 5.6.9 expose sensitive file information to unauthenticated users. An attacker can view file paths and metadata by visiting a specific page or following a crafted link. The vulnerability requires user interaction but does not require authentication. Update to a version newer than 5.6.9 to resolve this issue.
What an attacker can do
View sensitive file paths and metadata without authentication.
Potential impact on your site
Attackers can discover file structure and sensitive metadata, potentially aiding further attacks.
Conditions required to exploit
Victim must click a link or visit a specific page; no login required.
Key dates
External resources
Related vulnerabilities
