CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
What the vulnerability does
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in AmentoTech Workreap (theme's plugin) workreap allows Path Traversal.This issue affects Workreap (theme's plugin): from n/a through <= 3.3.5.
Explanation of Vulnerability in Simple Terms
Workreap versions up to 3.3.5 contain a path traversal vulnerability that allows authenticated users to cause a denial of service by accessing files outside the intended directory. The vulnerability requires a valid user account but no special privileges. An attacker can disrupt site availability by exhausting server resources or triggering errors through malicious file requests.
What an attacker can do
Make the site unavailable or unresponsive by requesting files outside the intended directory.
Potential impact on your site
Site availability can be disrupted; legitimate users may experience downtime or errors.
Conditions required to exploit
Attacker must have a valid user account (low privilege level); no user interaction required.
Key dates
External resources
