1 result · Clear filters · Feed
-
Medium 6.5
Bludit < 3.13.0 Authenticated Arbitrary File Download via Backup Plugin
Bludit versions before 3.13.0 contain an authenticated file download vulnerability in the Backup Plugin that allows logged-in users to access arbitrary files. Attackers can exploit the plugin's download functionality by manipulating file path parameters to re…