CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
What the vulnerability does
The 简数采集器 plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 2.6.3 via the __kds_flag functionality that imports featured images. This makes it possible for authenticated attackers, with Adminstrator-level access and above, to read the contents of arbitrary files on the server, which can contain sensitive information.
Explanation of Vulnerability in Simple Terms
A high-privilege user in 简数采集器 (Jianshu Collector) versions 2.6.3 and earlier can read sensitive data they should not have access to. The vulnerability requires administrative or equivalent high-level account access. No user interaction is needed once an attacker has gained that access level. The issue does not allow data modification or system unavailability.
What an attacker can do
Read sensitive information the attacker's account should not access.
Potential impact on your site
Administrators or high-privilege users can access confidential data beyond their intended scope.
Conditions required to exploit
Attacker must have high-level administrative privileges on the application.
Key dates
External resources
Related vulnerabilities
