CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
What the vulnerability does
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in marcelotorres Download Media Library download-media-library allows Retrieve Embedded Sensitive Data.This issue affects Download Media Library: from n/a through <= 0.2.1.
Explanation of Vulnerability in Simple Terms
Download Media Library versions 0.2.1 and earlier expose sensitive information through improper access controls. An unauthenticated attacker on the network can read confidential data without user interaction. The vulnerability affects the plugin's core functionality and may expose private files or metadata to unauthorized parties.
What an attacker can do
Read sensitive information from the plugin without authentication.
Potential impact on your site
Confidential data stored or managed by the plugin may be exposed to anyone on the internet.
Conditions required to exploit
Network access to the site; no authentication or user interaction required.
Key dates
External resources
