CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
What the vulnerability does
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Fahad Mahmood Keep Backup Daily keep-backup-daily allows Path Traversal.This issue affects Keep Backup Daily: from n/a through <= 2.1.0.
Explanation of Vulnerability in Simple Terms
Keep Backup Daily versions 2.1.0 and earlier contain a path traversal vulnerability that allows high-privilege users to read arbitrary files from the server. An attacker with administrative access can bypass directory restrictions and access sensitive files outside the intended backup scope. This affects confidentiality but not data integrity or availability.
What an attacker can do
Read arbitrary files from the server filesystem.
Potential impact on your site
Administrators with malicious intent or compromised admin accounts can access sensitive files like configuration files and database credentials.
Conditions required to exploit
Attacker must have high-level administrative privileges on the site.
Key dates
External resources
Related vulnerabilities
