CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N
What the vulnerability does
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Brainstorm Force Ultimate Addons for Beaver Builder allows Relative Path Traversal.This issue affects Ultimate Addons for Beaver Builder: from n/a through 1.35.13.
Explanation of Vulnerability in Simple Terms
Ultimate Addons for Beaver Builder versions up to 1.35.13 contain a path traversal vulnerability that allows authenticated users with low privileges to read sensitive files from the server. An attacker can access files outside the intended directory by manipulating file paths. The vulnerability requires network access and low-level authentication but no user interaction. Scope is changed, meaning the impact extends beyond the vulnerable component.
What an attacker can do
Read arbitrary files from the server, including configuration files and other sensitive data.
Potential impact on your site
Sensitive server files (config, database credentials, private keys) may be exposed to authenticated users.
Conditions required to exploit
Attacker must have a low-privilege user account on the site; network access required.
Key dates
External resources
Related vulnerabilities
